popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

PE Compile Time

1999-07-25 18:34:03

PDB Path

nlhtml.pdb

PE Imphash

c8e3f082cd2a7e37deae3dec52d0a7da

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00017afd 0x00017c00 6.15348614467
.rdata 0x00019000 0x00013f20 0x00014000 4.01147848274
.data 0x0002d000 0x000052dc 0x00000400 3.27691257621
.pdata 0x00033000 0x00001974 0x00001a00 5.1933079394
.didat 0x00035000 0x00000010 0x00000200 0.0815394123432
.rsrc 0x00036000 0x00000500 0x00000600 2.88447508263
.reloc 0x00037000 0x000013b4 0x00001400 5.26570387082

Resources

Name Offset Size Language Sub-language File type
MUI 0x00036438 0x000000c8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000360b0 0x00000384 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library msvcrt.dll:
• 0x160021180 wcsncmp
• 0x160021188 _wtoi
• 0x160021190 wcsrchr
• 0x160021198 _XcptFilter
• 0x1600211a0 _amsg_exit
• 0x1600211a8 _initterm
• 0x1600211b0 __C_specific_handler
• 0x1600211b8 _lock
• 0x1600211c0 _unlock
• 0x1600211c8 __dllonexit
• 0x1600211d0 _onexit
• 0x1600211d8 malloc
• 0x1600211e0 ?terminate@@YAXXZ
• 0x1600211e8 ??1type_info@@UEAA@XZ
• 0x1600211f0 memset
• 0x1600211f8 iswalpha
• 0x160021200 _wcsupr
• 0x160021208 memmove
• 0x160021210 memcpy
• 0x160021218 _wtol
• 0x160021220 _CxxThrowException
• 0x160021228 iswdigit
• 0x160021230 wcschr
• 0x160021238 _wcsicmp
• 0x160021240 towupper
• 0x160021248 wcstoul
• 0x160021250 bsearch
• 0x160021258 _wcsnicmp
• 0x160021260 _purecall
• 0x160021268 free
• 0x160021270 _vsnprintf_s
• 0x160021280 _wcslwr_s
• 0x160021288 iswspace
• 0x160021290 ??0exception@@QEAA@XZ
• 0x160021298 realloc
• 0x1600212a0 ??1exception@@UEAA@XZ
• 0x1600212a8 memcpy_s
• 0x1600212b0 _vsnwprintf
• 0x1600212b8 __CxxFrameHandler3
• 0x1600212c0 wcscmp
Library api-ms-win-core-libraryloader-l1-2-0.dll:
• 0x160020f00 LoadStringW
• 0x160020f08 FindResourceExW
• 0x160020f10 LoadResource
• 0x160020f18 GetProcAddress
• 0x160020f20 LoadLibraryExW
• 0x160020f28 GetModuleHandleW
• 0x160020f30 GetModuleFileNameA
• 0x160020f40 GetModuleHandleExW
• 0x160020f48 FreeLibrary
Library api-ms-win-core-synch-l1-1-0.dll:
• 0x1600210d0 CreateMutexExW
• 0x1600210d8 AcquireSRWLockExclusive
• 0x1600210e0 WaitForSingleObjectEx
• 0x1600210e8 ReleaseMutex
• 0x1600210f0 WaitForSingleObject
• 0x1600210f8 OpenSemaphoreW
• 0x160021100 ReleaseSRWLockExclusive
• 0x160021108 ReleaseSemaphore
• 0x160021110 CreateSemaphoreExW
Library api-ms-win-core-heap-l1-1-0.dll:
• 0x160020ec8 HeapFree
• 0x160020ed0 HeapAlloc
• 0x160020ed8 GetProcessHeap
Library api-ms-win-core-errorhandling-l1-1-0.dll:
• 0x160020e70 UnhandledExceptionFilter
• 0x160020e78 GetLastError
• 0x160020e80 SetLastError
Library api-ms-win-core-heap-l2-1-0.dll:
• 0x160020ee8 GlobalFree
• 0x160020ef0 GlobalAlloc
Library api-ms-win-core-processthreads-l1-1-0.dll:
• 0x160021000 GetCurrentProcessId
• 0x160021008 GetCurrentProcess
• 0x160021010 TerminateProcess
• 0x160021018 GetCurrentThreadId
Library api-ms-win-core-localization-l1-2-0.dll:
• 0x160020f68 GetLocaleInfoW
• 0x160020f70 GetSystemDefaultLCID
• 0x160020f78 IsDBCSLeadByteEx
• 0x160020f80 GetCPInfo
• 0x160020f88 IsValidCodePage
• 0x160020f90 FormatMessageW
Library api-ms-win-core-debug-l1-1-0.dll:
• 0x160020e28 DebugBreak
• 0x160020e30 OutputDebugStringW
• 0x160020e38 IsDebuggerPresent
Library api-ms-win-core-handle-l1-1-0.dll:
• 0x160020eb8 CloseHandle
Library api-ms-win-core-string-l1-1-0.dll:
• 0x160021098 MultiByteToWideChar
• 0x1600210a0 CompareStringW
• 0x1600210a8 GetStringTypeW
• 0x1600210b0 WideCharToMultiByte
Library api-ms-win-core-com-l1-1-0.dll:
• 0x160020e08 CoTaskMemFree
• 0x160020e10 CoCreateInstance
• 0x160020e18 CoTaskMemAlloc
Library OLEAUT32.dll:
• 0x160020de0 SysAllocStringLen
• 0x160020de8 SysFreeString
• 0x160020df0 SysAllocString
• 0x160020df8 VarR8FromStr
Library api-ms-win-core-localization-l1-2-2.dll:
• 0x160020fa0 LCIDToLocaleName
Library api-ms-win-core-string-obsolete-l1-1-0.dll:
• 0x1600210c0 lstrcmpiW
Library api-ms-win-core-registry-l1-1-0.dll:
• 0x160021038 RegOpenKeyExW
• 0x160021040 RegCloseKey
• 0x160021048 RegEnumKeyExW
• 0x160021050 RegQueryValueExW
• 0x160021058 RegDeleteValueW
• 0x160021060 RegSetValueExW
• 0x160021068 RegCreateKeyExW
Library api-ms-win-core-sysinfo-l1-1-0.dll:
• 0x160021140 GetTickCount
• 0x160021148 GetVersionExW
• 0x160021150 GetSystemTime
• 0x160021158 GetSystemTimeAsFileTime
• 0x160021160 GetVersionExA
Library api-ms-win-core-memory-l1-1-0.dll:
• 0x160020fc8 CreateFileMappingW
• 0x160020fd0 FlushViewOfFile
• 0x160020fd8 UnmapViewOfFile
• 0x160020fe0 MapViewOfFile
Library api-ms-win-core-file-l1-1-0.dll:
• 0x160020e90 SetEndOfFile
• 0x160020e98 CreateFileW
• 0x160020ea0 GetFileSize
• 0x160020ea8 SetFilePointer
Library api-ms-win-core-timezone-l1-1-0.dll:
• 0x160021170 SystemTimeToFileTime
Library api-ms-win-core-synch-l1-2-0.dll:
• 0x160021120 Sleep
• 0x160021128 WakeAllConditionVariable
Library api-ms-win-core-rtlsupport-l1-1-0.dll:
• 0x160021078 RtlCaptureContext
• 0x160021080 RtlLookupFunctionEntry
• 0x160021088 RtlVirtualUnwind
Library api-ms-win-core-profile-l1-1-0.dll:
• 0x160021028 QueryPerformanceCounter
Library api-ms-win-core-libraryloader-l1-2-1.dll:
• 0x160020f58 LoadLibraryW
Library api-ms-win-core-processenvironment-l1-1-0.dll:
• 0x160020ff0 SearchPathW
Library api-ms-win-core-localization-obsolete-l1-2-0.dll:
• 0x160020fb8 GetUserDefaultUILanguage
Library api-ms-win-core-delayload-l1-1-1.dll:
• 0x160020e58 ResolveDelayLoadedAPI
Library api-ms-win-core-delayload-l1-1-0.dll:
• 0x160020e48 DelayLoadFailureHook

Exports

Ordinal Address Name
1 0x16000b430 DllCanUnloadNow
2 0x160002c50 DllGetClassObject
3 0x160015060 DllRegisterServer
4 0x160015530 DllUnregisterServer
No antivirus signatures available.
No IRMA results available.