Static | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Static | ZeroBOX

PE Compile Time

2014-03-13 21:14:56

PDB Path

itircl.pdb

PE Imphash

380ae0a373c6ac6b63d2802c179548cd

Sections

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00001000	0x00027470	0x00027600	6.30583192072
.rdata	0x00029000	0x000062b4	0x00006400	4.95656230742
.data	0x00030000	0x00001fa8	0x00001a00	4.09600842129
.pdata	0x00032000	0x00001944	0x00001a00	5.16283245496
.rsrc	0x00034000	0x00000408	0x00000600	2.48068630006
.reloc	0x00035000	0x00000a3c	0x00000c00	5.14992111055

Resources

Name	Offset	Size	Language	Sub-language	File type
RT_VERSION	0x00034060	0x000003a8	LANG_ENGLISH	SUBLANG_ENGLISH_US	data

Imports

Library msvcrt.dll:

• 0x15d52b5c0 memmove

• 0x15d52b5c8 _initterm

• 0x15d52b5d0 _amsg_exit

• 0x15d52b5d8 __CxxFrameHandler3

• 0x15d52b5e0 memcpy

• 0x15d52b5e8 memcmp

• 0x15d52b5f0 _XcptFilter

• 0x15d52b5f8 _callnewh

• 0x15d52b600 malloc

• 0x15d52b608 _vsnprintf

• 0x15d52b610 strncmp

• 0x15d52b618 free

• 0x15d52b620 _purecall

• 0x15d52b628 __C_specific_handler

• 0x15d52b630 ?terminate@@YAXXZ

• 0x15d52b638 memset

Library KERNEL32.dll:

• 0x15d52b388 DeleteFileA

• 0x15d52b390 UnmapViewOfFile

• 0x15d52b398 VirtualFree

• 0x15d52b3a0 GlobalSize

• 0x15d52b3a8 GetCurrentDirectoryA

• 0x15d52b3b0 GlobalAlloc

• 0x15d52b3b8 GlobalFree

• 0x15d52b3c0 GlobalLock

• 0x15d52b3c8 GlobalUnlock

• 0x15d52b3d0 EnterCriticalSection

• 0x15d52b3d8 LeaveCriticalSection

• 0x15d52b3e0 InitializeCriticalSection

• 0x15d52b3e8 DeleteCriticalSection

• 0x15d52b3f0 GetModuleFileNameA

• 0x15d52b3f8 VirtualProtect

• 0x15d52b400 VirtualAlloc

• 0x15d52b408 LoadLibraryExA

• 0x15d52b410 GetModuleHandleA

• 0x15d52b418 MultiByteToWideChar

• 0x15d52b420 GetLastError

• 0x15d52b428 DisableThreadLibraryCalls

• 0x15d52b430 GetSystemInfo

• 0x15d52b438 HeapDestroy

• 0x15d52b440 WideCharToMultiByte

• 0x15d52b448 lstrcmpiA

• 0x15d52b450 VirtualQuery

• 0x15d52b458 GlobalReAlloc

• 0x15d52b460 CompareStringW

• 0x15d52b468 GetACP

• 0x15d52b470 CompareStringA

• 0x15d52b478 GetUserDefaultLCID

• 0x15d52b480 GetVersionExA

• 0x15d52b488 Sleep

• 0x15d52b490 RtlCaptureContext

• 0x15d52b498 RtlLookupFunctionEntry

• 0x15d52b4a0 RtlVirtualUnwind

• 0x15d52b4a8 UnhandledExceptionFilter

• 0x15d52b4b0 SetUnhandledExceptionFilter

• 0x15d52b4b8 GetCurrentProcess

• 0x15d52b4c0 TerminateProcess

• 0x15d52b4c8 QueryPerformanceCounter

• 0x15d52b4d0 GetCurrentProcessId

• 0x15d52b4d8 GetCurrentThreadId

• 0x15d52b4e0 GetSystemTimeAsFileTime

• 0x15d52b4e8 GetTickCount

• 0x15d52b4f0 lstrlenA

• 0x15d52b4f8 GetFullPathNameA

• 0x15d52b500 LocalLock

• 0x15d52b508 LocalAlloc

• 0x15d52b510 LocalFree

• 0x15d52b518 LocalUnlock

• 0x15d52b520 GetProcAddress

• 0x15d52b528 GetTempFileNameA

• 0x15d52b530 GetTempPathA

• 0x15d52b538 OpenFile

• 0x15d52b540 SetFilePointer

• 0x15d52b548 OutputDebugStringA

• 0x15d52b550 WriteFile

• 0x15d52b558 ReadFile

• 0x15d52b560 MapViewOfFile

• 0x15d52b568 GlobalFlags

• 0x15d52b570 CreateFileA

• 0x15d52b578 CloseHandle

• 0x15d52b580 GlobalHandle

• 0x15d52b588 CreateFileMappingA

• 0x15d52b590 GetFileSize

Library USER32.dll:

• 0x15d52b5a0 CharUpperA

• 0x15d52b5a8 CharNextA

• 0x15d52b5b0 LoadStringA

Library ADVAPI32.dll:

• 0x15d52b358 RegCloseKey

• 0x15d52b360 RegCreateKeyExA

• 0x15d52b368 RegSetValueExA

• 0x15d52b370 RegEnumKeyExA

• 0x15d52b378 RegOpenKeyExA

Library ole32.dll:

• 0x15d52b648 ReadClassStm

• 0x15d52b650 WriteClassStm

• 0x15d52b658 CoTaskMemFree

• 0x15d52b660 StringFromCLSID

• 0x15d52b668 CoCreateInstance

• 0x15d52b670 CoGetClassObject

Exports

Ordinal	Address	Name
1	0x15d504100	DllCanUnloadNow
2	0x15d504120	DllGetClassObject
3	0x15d504140	DllRegisterServer
4	0x15d504200	DllUnregisterServer

No antivirus signatures available.

No IRMA results available.