Static | ZeroBOX

PE Compile Time

2021-10-21 23:17:33

PE Imphash

5e726a232a120b1495be711a060576c9

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000458a8 0x00046000 5.98815144477
.data 0x00047000 0x000020e0 0x00001000 0.0
.rsrc 0x0004a000 0x000011a8 0x00002000 3.10646764042

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0004a300 0x00000ea8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0004a2ec 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0004a0f0 0x000001fc LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED data

Imports

Library MSVBVM60.DLL:
0x401000 __vbaVarSub
0x401004 __vbaStrI2
0x401008 _CIcos
0x40100c _adj_fptan
0x401010 __vbaVarMove
0x401014 __vbaFreeVar
0x401018 __vbaLenBstr
0x40101c None
0x401020 __vbaStrVarMove
0x401024 __vbaLateIdCall
0x401028 __vbaEnd
0x40102c __vbaFreeVarList
0x401030 _adj_fdiv_m64
0x401034 __vbaRaiseEvent
0x401038 __vbaNextEachVar
0x40103c __vbaFreeObjList
0x401040 __vbaLineInputVar
0x401044 _adj_fprem1
0x401048 __vbaRecAnsiToUni
0x40104c None
0x401050 __vbaCopyBytes
0x401054 __vbaStrCat
0x401058 None
0x40105c __vbaLsetFixstr
0x401060 __vbaSetSystemError
0x401068 _adj_fdiv_m32
0x40106c __vbaAryDestruct
0x401070 None
0x401074 __vbaVarForInit
0x401078 __vbaExitProc
0x40107c __vbaI4Abs
0x401080 None
0x401084 __vbaFileCloseAll
0x401088 __vbaObjSet
0x40108c __vbaOnError
0x401090 None
0x401094 _adj_fdiv_m16i
0x401098 __vbaObjSetAddref
0x40109c _adj_fdivr_m16i
0x4010a0 None
0x4010a4 __vbaFpR4
0x4010a8 __vbaBoolVar
0x4010ac __vbaFpR8
0x4010b0 __vbaVarTstLt
0x4010b4 _CIsin
0x4010b8 None
0x4010bc __vbaErase
0x4010c0 __vbaChkstk
0x4010c4 __vbaCyVar
0x4010c8 __vbaFileClose
0x4010cc EVENT_SINK_AddRef
0x4010d0 None
0x4010d4 __vbaVarAbs
0x4010dc None
0x4010e0 __vbaStrCmp
0x4010e4 None
0x4010e8 __vbaAryConstruct2
0x4010ec __vbaPrintObj
0x4010f0 __vbaI2I4
0x4010f4 DllFunctionCall
0x4010f8 __vbaCastObjVar
0x4010fc __vbaRedimPreserve
0x401100 _adj_fpatan
0x401104 __vbaR4Var
0x401108 __vbaLateIdCallLd
0x40110c __vbaRedim
0x401110 __vbaRecUniToAnsi
0x401114 EVENT_SINK_Release
0x401118 None
0x40111c __vbaUI1I2
0x401120 _CIsqrt
0x401124 __vbaObjIs
0x40112c __vbaExceptHandler
0x401130 __vbaStrToUnicode
0x401134 None
0x401138 __vbaPrintFile
0x40113c None
0x401140 _adj_fprem
0x401144 _adj_fdivr_m64
0x401148 __vbaFPException
0x40114c __vbaInStrVar
0x401150 None
0x401154 __vbaUbound
0x401158 __vbaStrVarVal
0x40115c __vbaVarCat
0x401160 None
0x401164 __vbaI2Var
0x401168 None
0x40116c None
0x401170 None
0x401174 _CIlog
0x401178 __vbaErrorOverflow
0x40117c __vbaFileOpen
0x401180 __vbaInStr
0x401184 __vbaNew2
0x40118c _adj_fdiv_m32i
0x401190 None
0x401194 _adj_fdivr_m32i
0x401198 __vbaStrCopy
0x40119c None
0x4011a0 __vbaI4Str
0x4011a4 __vbaFreeStrList
0x4011a8 _adj_fdivr_m32
0x4011ac _adj_fdiv_r
0x4011b0 None
0x4011b4 None
0x4011b8 __vbaVarTstNe
0x4011bc __vbaVarSetVar
0x4011c0 __vbaI4Var
0x4011c4 __vbaVarAdd
0x4011c8 None
0x4011cc __vbaStrToAnsi
0x4011d0 __vbaVarDup
0x4011d4 None
0x4011d8 __vbaFpI2
0x4011dc __vbaVarCopy
0x4011e0 None
0x4011e4 __vbaFpI4
0x4011ec __vbaUnkVar
0x4011f0 __vbaR8IntI2
0x4011f4 __vbaLateMemCallLd
0x4011fc _CIatan
0x401200 __vbaStrMove
0x401204 __vbaCastObj
0x401208 __vbaR8IntI4
0x40120c __vbaStrVarCopy
0x401210 __vbaForEachVar
0x401214 _allmul
0x401218 __vbaFpCSngR4
0x40121c __vbaLateIdSt
0x401220 _CItan
0x401224 None
0x401228 __vbaFPInt
0x40122c __vbaAryUnlock
0x401230 __vbaVarForNext
0x401234 _CIexp
0x401238 __vbaFreeObj
0x40123c __vbaFreeStr
0x401240 None

!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
SComboBox
RKShadeButton
Form10
- B3l058KC-2.5
/+866"!
&&&((.
WUT=7.1
YJQiPPPPPPPOM
<LfKHHKKKHHjNFAs
^CgLIeeMGJIF]BAA:
g@CBBIJJQmQOKJFZ
:DBIJQQbc
>CBJOSOt
CBIOSa
(&
&&&.(
&&&(((1.
&&&&(((..
&&&&(((...11
&&&&(((...111
&&&&(((...111
&&&&((((..0111
%&&'((-..111
Frame111
Text55
Text44
Text33
Text22
Text11
Text66
Command111
Label19
Label18
Label17
Label16
Label15
Label14
Command4
Frame1
SComboBox1
.SComboBox
Frame2
Check1
Command3
.RKShadeButton
Picture2
05701h
GFleming
mmmZZZIII
Frame4
Label12
Frame3
Timer2
Timer1
Picture1
Label12
Label8
40-95/ms
Label7
Label6
Label5
Label4
Label3
Label13
Image2
""""""
"""""""
"""""""
""""""
Label12
Image3
Image1
05701h
GFleming
Label10
Label9
Label2
Label1
Command2
Command1
Label11
ImageA
C:\Users\Administrator\Desktop\32-256.ico
;55441111101101101101114455;
<23;;;555555555555;;;=
???????
+'%#()
ImageB
C:\Users\Administrator\Desktop\32-256.ico
;55441111101101101101114455;
<23;;;555555555555;;;=
???????
+'%#()
:0KB [
VB5!6&vb6chs.dll
cs-daili
.RKShadeButton
RKShadeButton
.SComboBox
SComboBox
Form10
WinIcon
Module1
RKShadeButton
SComboBox
Y# D6Z
C:\Program Files (x86)\VB6Mini\bin\VB6.OLB
Frame2
Frame1
Label8
Label9
Text11
Label4
Command1
Text33
Command4
Text44
Text55
Text66
Text22
Label10
Command2
Command3
Timer2
Label1
Picture1
Label5
Label7
Label6
Label11
FSComboBox1
Label3
Timer1
Image3
Image2
ImageB
ImageA
Label18
Label19
Label12
Label13
Label16
Image1
Command111
Label17
Label14
Label15
Picture2
Frame111
Frame4
Frame3
Label2
Check1
User32
SetWindowPos
user32.dll
SetWindowLongA
CallWindowProcA
shell32.dll
Shell_NotifyIconA
wininet.dll
InternetGetConnectedState
HQ\Pbk
hKm-N.
hKm-N.
VBA6.DLL
__vbaAryUnlock
__vbaExitProc
__vbaNextEachVar
__vbaVarSetObjAddref
__vbaUnkVar
__vbaObjIs
__vbaVarLateMemCallLdRf
__vbaInStrVar
__vbaVarTstNe
__vbaForEachVar
__vbaVarLateMemCallLd
__vbaVarSetVar
__vbaSetSystemError
__vbaVarAdd
__vbaI4Str
__vbaFreeVarList
__vbaI2Var
__vbaFileCloseAll
__vbaStrVarCopy
__vbaLateIdCall
__vbaVarForNext
__vbaLineInputVar
__vbaVarForInit
__vbaCastObj
S_MR*g
__vbaEnd
__vbaVarDup
__vbaOnError
__vbaErrorOverflow
__vbaAryDestruct
__vbaStrVarVal
__vbaVarTstLt
__vbaFPInt
__vbaVarMove
__vbaAryConstruct2
__vbaFileClose
__vbaLateIdSt
__vbaPrintFile
__vbaFileOpen
__vbaFreeVar
__vbaLateIdCallLd
__vbaStrVarMove
__vbaStrI2
__vbaStrCmp
__vbaFreeStr
__vbaFreeObj
__vbaFreeObjList
__vbaFreeStrList
__vbaNew2
__vbaStrCopy
__vbaStrCat
__vbaStrMove
__vbaHresultCheckObj
__vbaObjSet
__vbaRecAnsiToUni
__vbaRecUniToAnsi
__vbaI4Var
__vbaLsetFixstr
picBtn
lblCaption
TimerPaint
UserControl
picMain
Rectangle
DrawFocusRect
DrawTextA
BitBlt
__vbaRaiseEvent
StretchBlt
msimg32
AlphaBlend
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
ReleaseCapture
SetCapture
kernel32
lstrlenA
GetCursorPos
ScreenToClient
Caption
Enabled
ForeColor
HotColor
PressedColor
MouseOut
MouseMove
MouseDown
MouseUp
__vbaObjSetAddref
__vbaFpI4
__vbaBoolVar
__vbaLateMemCallLd
__vbaStrToUnicode
__vbaStrToAnsi
__vbaGenerateBoundsError
__vbaUI1I2
__vbaI2I4
__vbaFpCSngR4
__vbaFpR8
scrollI
picList
txtCombo
tmrFocus
picTemp
uxtheme.dll
CloseThemeData
CreatePen
SelectBorderColor
CreatePolygonRgn
CreateRectRgn
CreateSolidBrush
DispatchMessageA
DrawEdge
DrawStateA
DrawThemeBackground
FrameRect
FillRect
GetAsyncKeyState
GetMessageA
GetPixel
GetSysColor
C:\Windows\SysWOW64\stdole2.tlb
stdole
GetSystemMetrics
GetTempPathA
GetWindowDC
GetWindowLongA
GetWindowRect
GradientFill
OfficeAppearance
LineTo
MoveToEx
oleaut32.dll
OleTranslateColor
OpenThemeData
SetParent
gdi32.dll
SetPixel
SetRect
SetTextColor
SetWindowRgn
Alignment
AppearanceCombo
ArrowColor
AutoCompleteWord
BackColor
DisabledColor
DisabledPictureUser
FocusPictureUser
GradientColor1
GradientColor2
HighLightBorderColor
HighLightColorText
HighLightPictureUser
ItemTag
ListColor
ListCount
ListGradient
ListIndex
ListPositionShow
MaxListLength
MouseIcon
MousePointer
NewIndex
NormalBorderColor
NormalColorText
NormalPictureUser
NumberItemsToShow
SelectListBorderColor
SelectListColor
ShadowColorText
XpAppearance
AddItem
ChangeItem
FindItemText
GetControlVersion
ItemEnabled
OrderList
RemoveItem
SelectionMade
TotalItems
__vbaVarCopy
__vbaUbound
__vbaInStr
__vbaFpR4
__vbaCopyBytes
__vbaR4Var
__vbaPrintObj
__vbaVarSub
__vbaVarAbs
__vbaR8IntI2
__vbaRedim
__vbaVarCat
__vbaFpI2
__vbaRedimPreserve
__vbaCyVar
__vbaErase
__vbaCastObjVar
__vbaLenBstr
__vbaI4Abs
__vbaR8IntI4
SComboBox
tmrFocus
picList
txtCombo
RKShadeButton
picBtn
picBtn
picBtn
picBtn
picMain
lblCaption
picBtn
TimerPaint
Label1
RKShadeButton v1.4
Button
Sets/Gets alignment of the text in the list.
New_Align
Sets/Gets the style of the Combo.
New_Style
Sets/Gets the color of the arrow.
New_Color
Sets/Gets complete the word with a similar element of the list.
New_Value
Sets/Gets the color of the Usercontrol.
Sets/Gets the color of the disabled text.
Sets/Gets an image like topic of the Combo when the Object is not enabled.
New_Picture
Sets/Gets the Enabled property of the control.
New_Enabled
Sets/Gets the image like topic of the Combo when It has the focus.
Set the Font of the control.
New_Font
Sets/Gets the color First gradient color.
Sets/Gets the Second gradient color.
Sets/Gets the color of the border of the control when the the control is highlighted.
Sets/Gets the color of the selection of the text.
Sets/Gets an image like topic of the Combo when the mouse is over the control.
ListIndex
Returns the tag of a specified item.
Sets/Gets the color of the List.
Returns the number of elements in the list.
Sets/Gets the list in degraded form.
New_Gradient
Sets/Gets the selected item.
New_ListIndex
Sets/Gets If the list is shown up or down.
New_Position
Sets/Gets the maximum size of the list.
ListMax
Sets a custom mouse icon.
New_MouseIcon
Sets/Gets the type of mouse pointer displayed when over part of an object.
New_MousePointer
Sets/Gets the last Item added.
ValueItem
Sets/Gets the normal border color of the control.
Sets/Gets the normal text color in the control.
Sets/Gets an image like topic of the Combo in normal state.
Sets/Gets the number of items to show per time.
ItemsShow
Sets/Gets the office apperance.
New_Apperance
Sets/Gets the color of the border of the control when It has the focus.
Sets/Gets the border color of the item selected in the list.
Sets/Gets the color of the item selected in the list.
Sets/Gets the text color of the shadow.
Sets/Gets the text of the selected item.
NewText
Sets the appearance in Xp Mode.
ColorTextItem
ImageItem
EnabledItem
ToolTipTextItem
IndexItem
ItemTag
MouseIcon
SeparatorLine
TextShadow
Add a new item to the list.
Modifies an item of the list.
Clear the list.
Compare
Search Text in the list and return the position.
Control Version.
Sets the Enabled/disabled property in an Item.
Show one item of the list.
Order the list with the search method (I Exchange).
Delete a Item from the list.
SelectedItem
SelectedItemIndex
ListCount
~tf9x2t
L$$SUV3
L$(SUV3
}#jdh\
Qj{h/g
}#j`h\
}#j`h\
}#j`h\
}#j`h\
Pjqh1j
}#jXh\
}#jXh\
}#jThP
Qu|j1hc
PuAjYhgeh
PjYh)))
NDPjph
FDRj|h
Qjqh1j
Qj]h1j
D$8QPV
L$8RQV
FDRhWp
FDRhWp
}#jlhP
}#jlhP
}#jlhP
}#jlhP
}#jlhP
Qjmh"P
D$ RV3
T$Lp8QRS
D$Lp&;
Qj{h/g
Qj{h/g
f9^Nt^;
MSVBVM60.DLL
__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaLateIdCall
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaRaiseEvent
__vbaNextEachVar
__vbaFreeObjList
__vbaLineInputVar
_adj_fprem1
__vbaRecAnsiToUni
__vbaCopyBytes
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarForInit
__vbaExitProc
__vbaI4Abs
__vbaFileCloseAll
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaFpR4
__vbaBoolVar
__vbaFpR8
__vbaVarTstLt
_CIsin
__vbaErase
__vbaChkstk
__vbaCyVar
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarAbs
__vbaGenerateBoundsError
__vbaStrCmp
__vbaAryConstruct2
__vbaPrintObj
__vbaI2I4
DllFunctionCall
__vbaCastObjVar
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaInStrVar
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaNew2
__vbaVarLateMemCallLdRf
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarTstNe
__vbaVarSetVar
__vbaI4Var
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarCopy
__vbaFpI4
__vbaVarLateMemCallLd
__vbaUnkVar
__vbaR8IntI2
__vbaLateMemCallLd
__vbaVarSetObjAddref
_CIatan
__vbaStrMove
__vbaCastObj
__vbaR8IntI4
__vbaStrVarCopy
__vbaForEachVar
_allmul
__vbaFpCSngR4
__vbaLateIdSt
_CItan
__vbaFPInt
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr
/+866"!
&&&((.
WUT=7.1
YJQiPPPPPPPOM
<LfKHHKKKHHjNFAs
^CgLIeeMGJIF]BAA:
g@CBBIJJQmQOKJFZ
:DBIJQQbc
>CBJOSOt
CBIOSa
(&
&&&.(
&&&(((1.
&&&&(((..
&&&&(((...11
&&&&(((...111
&&&&(((...111
&&&&((((..0111
%&&'((-..111
_extentx
_extenty
appearancecombo
maxlistlength
numberitemstoshow
shadowcolortext
_extentx
_extenty
caption
SComboBox 1.0.3 By HACKPRO TM
&HFFFFFF
:0KB [
C:\Dl_Jd.ini
C:\Dl_Dl.ini
taskkill /f /im NewTcp.Dat
taskkill /f /im
WinMgmts:
Win32_Process
InstancesOf
Description
ForeColor
RKShade
Caption
Enabled
HotColor
PressedColor
GradientColor1
GradientColor2
FocusPictureUser
HighLightBorderColor
Alignment
AppearanceCombo
ArrowColor
AutoCompleteWord
BackColor
DisabledColor
DisabledPictureUser
HighLightColorText
HighLightPictureUser
ListColor
ListGradient
ListPositionShow
MaxListLength
MouseIcon
MousePointer
NormalBorderColor
NormalColorText
NormalPictureUser
NumberItemsToShow
OfficeAppearance
SelectBorderColor
SelectListBorderColor
SelectListColor
ShadowColorText
XpAppearance
VB.VScrollBar
scrollI
VB.PictureBox
picTemp
\~ConvIconToBmp.tmp
BackColor
ComboBox
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
080404B0
ProductName
FileVersion
2021.10.0017
ProductVersion
2021.10.0017
InternalName
cs-daili
OriginalFilename
cs-daili.exe
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Babar.4!c
Elastic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.VBObfus.dm
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Agent.Vsxg
CrowdStrike Clean
Alibaba Clean
K7GW Clean
K7AntiVirus Clean
huorong Clean
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec Trojan.Gen.MBT
tehtris Clean
ESET-NOD32 Clean
APEX Clean
Avast Win32:Malware-gen
Cynet Clean
Kaspersky Clean
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
Sophos Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfeeD ti!A59992138030
Trapmine Clean
CTX exe.trojan.babar
Emsisoft Clean
Ikarus Clean
FireEye Clean
Jiangmin Clean
Webroot Clean
Varist Clean
Avira Clean
Fortinet Clean
Antiy-AVL Trojan/Win32.Agent
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Clean
Google Clean
AhnLab-V3 Clean
Acronis Clean
McAfee GenericRXQP-XP!4ADCB0F7A3D2
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Clean
MaxSecure Clean
GData Clean
AVG Win32:Malware-gen
DeepInstinct MALICIOUS
alibabacloud Clean
No IRMA results available.