Static | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Static | ZeroBOX

PE Compile Time

2092-10-03 00:27:49

PDB Path

imapi.pdb

PE Imphash

fbe80419e46c9924d8dcc683c1646838

Sections

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00001000	0x0001888c	0x00018a00	6.22914316007
.rdata	0x0001a000	0x00006086	0x00006200	4.15443924338
.data	0x00021000	0x00001b88	0x00001600	4.15556128185
.pdata	0x00023000	0x00000d50	0x00000e00	4.86236573083
.rsrc	0x00024000	0x000010f0	0x00001200	4.79367890139
.reloc	0x00026000	0x000003b4	0x00000400	5.15940717959

Resources

Name	Offset	Size	Language	Sub-language	File type
MUI	0x00025018	0x000000d8	LANG_ENGLISH	SUBLANG_ENGLISH_US	data
REGISTRY	0x00024ce0	0x00000338	LANG_ENGLISH	SUBLANG_ENGLISH_US	ASCII text, with CRLF line terminators
REGISTRY	0x00024ce0	0x00000338	LANG_ENGLISH	SUBLANG_ENGLISH_US	ASCII text, with CRLF line terminators
REGISTRY	0x00024ce0	0x00000338	LANG_ENGLISH	SUBLANG_ENGLISH_US	ASCII text, with CRLF line terminators
REGISTRY	0x00024ce0	0x00000338	LANG_ENGLISH	SUBLANG_ENGLISH_US	ASCII text, with CRLF line terminators
RT_VERSION	0x000241a0	0x00000384	LANG_ENGLISH	SUBLANG_ENGLISH_US	data

Imports

Library msvcrt.dll:

• 0x18001b028 _CxxThrowException

• 0x18001b030 __RTDynamicCast

• 0x18001b038 memcmp

• 0x18001b040 memcpy

• 0x18001b048 memset

• 0x18001b050 _onexit

• 0x18001b058 __dllonexit

• 0x18001b060 _unlock

• 0x18001b068 _lock

• 0x18001b070 ??1type_info@@UEAA@XZ

• 0x18001b078 realloc

• 0x18001b080 _errno

• 0x18001b088 _initterm

• 0x18001b090 _amsg_exit

• 0x18001b098 _XcptFilter

• 0x18001b0a0 _callnewh

• 0x18001b0a8 _wremove

• 0x18001b0b0 _vsnwprintf

• 0x18001b0b8 wcscat_s

• 0x18001b0c0 wcscpy_s

• 0x18001b0c8 wcsstr

• 0x18001b0d0 wcsncpy_s

• 0x18001b0d8 malloc

• 0x18001b0e0 free

• 0x18001b0e8 _purecall

• 0x18001b0f0 memcpy_s

• 0x18001b0f8 __CxxFrameHandler3

• 0x18001b100 __C_specific_handler

• 0x18001b108 wcscmp

Library ntdll.dll:

• 0x18001b118 RtlLookupFunctionEntry

• 0x18001b120 RtlVirtualUnwind

• 0x18001b128 RtlCaptureContext

Library USER32.dll:

• 0x18001b010 UnregisterClassA

• 0x18001b018 CharNextW

Library ADVAPI32.dll:

• 0x18001ad50 UnregisterTraceGuids

• 0x18001ad58 RegisterTraceGuidsW

• 0x18001ad60 GetTraceEnableFlags

• 0x18001ad68 GetTraceEnableLevel

• 0x18001ad70 GetTraceLoggerHandle

• 0x18001ad78 RegQueryValueExW

• 0x18001ad80 TraceMessage

• 0x18001ad88 RegCloseKey

• 0x18001ad90 RegQueryInfoKeyW

• 0x18001ad98 RegCreateKeyExW

• 0x18001ada0 RegEnumKeyExW

• 0x18001ada8 RegSetValueExW

• 0x18001adb0 RegOpenKeyExW

• 0x18001adb8 RegDeleteValueW

Library ole32.dll:

• 0x18001b138 CoTaskMemFree

• 0x18001b140 CoTaskMemAlloc

• 0x18001b148 PropVariantClear

• 0x18001b150 StringFromGUID2

• 0x18001b158 CreateStreamOnHGlobal

• 0x18001b160 CoTaskMemRealloc

• 0x18001b168 CoCreateInstance

Library OLEAUT32.dll:

• 0x18001af60 LoadRegTypeLib

• 0x18001af68 SafeArrayGetElement

• 0x18001af70 SafeArrayGetUBound

• 0x18001af78 SafeArrayGetLBound

• 0x18001af80 VarBstrCat

• 0x18001af88 SysAllocStringByteLen

• 0x18001af90 SysStringByteLen

• 0x18001af98 GetErrorInfo

• 0x18001afa0 DispCallFunc

• 0x18001afa8 VariantClear

• 0x18001afb0 LoadTypeLib

• 0x18001afb8 SafeArrayDestroy

• 0x18001afc0 SysAllocStringLen

• 0x18001afc8 SysStringLen

• 0x18001afd0 SysAllocString

• 0x18001afd8 SysFreeString

• 0x18001afe0 VarUI4FromStr

• 0x18001afe8 SystemTimeToVariantTime

• 0x18001aff0 VariantInit

Library SHLWAPI.dll:

• 0x18001b000 SHCreateStreamOnFileEx

Library KERNEL32.dll:

• 0x18001adc8 GetTempFileNameW

• 0x18001add0 GetVolumeInformationW

• 0x18001add8 CreateMutexW

• 0x18001ade0 SetEvent

• 0x18001ade8 LocalFree

• 0x18001adf0 Sleep

• 0x18001adf8 UnhandledExceptionFilter

• 0x18001ae00 SetUnhandledExceptionFilter

• 0x18001ae08 GetCurrentProcess

• 0x18001ae10 TerminateProcess

• 0x18001ae18 ReleaseSRWLockExclusive

• 0x18001ae20 AcquireSRWLockExclusive

• 0x18001ae28 WakeAllConditionVariable

• 0x18001ae30 SleepConditionVariableSRW

• 0x18001ae38 QueryPerformanceCounter

• 0x18001ae40 GetCurrentProcessId

• 0x18001ae48 GetCurrentThreadId

• 0x18001ae50 GetSystemTimeAsFileTime

• 0x18001ae58 GetTickCount

• 0x18001ae60 OutputDebugStringA

• 0x18001ae68 ResetEvent

• 0x18001ae70 ReleaseMutex

• 0x18001ae78 SizeofResource

• 0x18001ae80 FileTimeToSystemTime

• 0x18001ae88 GlobalFree

• 0x18001ae90 GlobalAlloc

• 0x18001ae98 GetDateFormatW

• 0x18001aea0 InitializeCriticalSectionAndSpinCount

• 0x18001aea8 CreateEventW

• 0x18001aeb0 CloseHandle

• 0x18001aeb8 DisableThreadLibraryCalls

• 0x18001aec0 WaitForSingleObject

• 0x18001aec8 LoadLibraryExW

• 0x18001aed0 lstrcmpiW

• 0x18001aed8 FreeLibrary

• 0x18001aee0 GetModuleHandleW

• 0x18001aee8 DeleteCriticalSection

• 0x18001aef0 GetProcAddress

• 0x18001aef8 LoadResource

• 0x18001af00 FindResourceExW

• 0x18001af08 RaiseException

• 0x18001af10 GetLastError

• 0x18001af18 MultiByteToWideChar

• 0x18001af20 InitializeCriticalSection

• 0x18001af28 LeaveCriticalSection

• 0x18001af30 GetModuleFileNameW

• 0x18001af38 EnterCriticalSection

• 0x18001af40 GetTempPathW

• 0x18001af48 LocalAlloc

• 0x18001af50 WideCharToMultiByte

Exports

Ordinal	Address	Name
1	0x180007750	DllCanUnloadNow
2	0x180007770	DllGetClassObject
3	0x1800078a0	DllRegisterServer
4	0x1800079d0	DllUnregisterServer

No antivirus signatures available.

No IRMA results available.