Static | ZeroBOX

PE Compile Time

1970-01-01 09:00:00

PE Imphash

9133e54115603c0107b8f985598440d0

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000020b8 0x00002200 5.99522861881
.data 0x00004000 0x000542c0 0x00054400 7.36916320901
.rdata 0x00059000 0x00000840 0x00000a00 4.02156271493
.pdata 0x0005a000 0x000002b8 0x00000400 3.23937515039
.xdata 0x0005b000 0x0000024c 0x00000400 2.72846950933
.bss 0x0005c000 0x000009e0 0x00000000 0.0
.idata 0x0005d000 0x00000934 0x00000a00 4.11748790599
.CRT 0x0005e000 0x00000068 0x00000200 0.26701297826
.tls 0x0005f000 0x00000068 0x00000200 0.20448815744

Imports

Library KERNEL32.dll:
0x45d23c CloseHandle
0x45d244 ConnectNamedPipe
0x45d24c CreateFileA
0x45d254 CreateNamedPipeA
0x45d25c CreateThread
0x45d274 GetCurrentProcess
0x45d27c GetCurrentProcessId
0x45d284 GetCurrentThreadId
0x45d28c GetLastError
0x45d294 GetModuleHandleA
0x45d29c GetProcAddress
0x45d2a4 GetStartupInfoA
0x45d2b4 GetTickCount
0x45d2d4 ReadFile
0x45d2dc RtlAddFunctionTable
0x45d2e4 RtlCaptureContext
0x45d2f4 RtlVirtualUnwind
0x45d304 Sleep
0x45d30c TerminateProcess
0x45d314 TlsGetValue
0x45d324 VirtualAlloc
0x45d32c VirtualProtect
0x45d334 VirtualQuery
0x45d33c WriteFile
Library msvcrt.dll:
0x45d354 __dllonexit
0x45d35c __getmainargs
0x45d364 __initenv
0x45d36c __iob_func
0x45d374 __lconv_init
0x45d37c __set_app_type
0x45d384 __setusermatherr
0x45d38c _acmdln
0x45d394 _amsg_exit
0x45d39c _cexit
0x45d3a4 _fmode
0x45d3ac _initterm
0x45d3b4 _lock
0x45d3bc _onexit
0x45d3c4 _unlock
0x45d3cc abort
0x45d3d4 calloc
0x45d3dc exit
0x45d3e4 fprintf
0x45d3ec free
0x45d3f4 fwrite
0x45d3fc malloc
0x45d404 memcpy
0x45d40c signal
0x45d414 sprintf
0x45d41c strlen
0x45d424 strncmp
0x45d42c vfprintf

!This program cannot be run in DOS mode.
P`.data
.rdata
P@.pdata
0@.xdata
0@.bss
.idata
8MZtxH
AUATUWVSH
[^_]A\A]
ATUWVSH
@[^_]A\
ATUWVSH
0[^_]A\
H3|$(D
0[^_]A\
AUATUWVSH
X[^_]A\A]
UAWAVAUATWVSH
[^_A\A]A^A_]
ATUWVSH
[^_]A\
([^_]H
'1#D3F
DF1 F2
GF[*GF
B18xE}
DI7nGF
cfZ]jF
Bs9OMz
RKF2)q
GF1"OI=
GVZ-\F
GVZ!HF
RKN29x
GF7.3L
GF[OGF
FI5sGF
GF[XGF
GFqRFb
HurX>DM
GF1!@I=QGF
oE{M'WF
QDur3B
QDur3B
GF1!OI6
3h12w2
GFq`FF
GFq`OF
GFq`AF
O1!#I17GF
QQur3B
Q?NZ]_F
GF[;GF
GF[}sF
I759n9
?tc>Z'
Ex3Eu{
[mJ`FF
GFZ%PG
GFZ1)G
GFZ%WG
CFZYWG
CFZ]HG
GFZE)G
GFZMyF
KlTDF7
PvZ}IF
CF9YSY
CF9YWY
;\FnM'
GFZ1@F
cfZMDF
GF7.227536
mzQKUY
cf[[GF
Gur1}E
]fGFZS@D
4pGFYP
GI7NGF
CFZ1[G
G3EaJF
3YZePG
1'F:Ub
1 g4eS
wFZ1nG
cfZ!5F
1#M4u'R
cfZA,F
GF1 E3
S,#DF1
cfZ=&F
GI5{GF
GF9!2A
cfZeAF
GF[jGF
1!EI4JGF
UCY1 WI=!GF
G 1 @3
G 1 M3
UCY1 W9
2N1 g3
K0K8M'
d078M'
e0#8M'
XGFZQ=
S$4FF7
Sx}DFM
cD<FF~
Sh;FF?`
|0c0M'
G3Ea}F
{P@DF1}
DI7WGF
GF[QGF
GI6yGF
K0LDF1
FF1|c>
GFu\c:
~C<UDF
4EGF9\c
C|SDF;
GF12NI6
CDcFFZ
GF1!@1
GF1!Q1
GF1!kI5%GF
GF[iBF
x0;"M'
GF11|2
x0c%M'
x0kRM'
GF1!#I5GF
GF1!6I5HGF
3^1!@I7QGF
SlpFF7
B0CvM'
d0cvM'
{ vFF7
|0o6M'
}CDsFF
}CisFF
GF12D2
cvs0_cM
GFuX'G
oG s0K 18HI
oG s0K 18HI
GF~aFF
GFZ%3F
3[[,GF
3M1 W;
GF~aFF
M3L 1#D3
s2]/`'
gI0tGF
DF7.3r
18HI7WGF
GI6tFF
DFZR}F
pDF1 F3
Sp{DF1"F3
yDF1!F3
cfZ~hF
{dFDF1#F3
s0EDF1#F3
Z0OzM'
DF1 F3
B0sqM'
GI6kGF
cf1 F3
w0_rM'
Z0?uM'
S4IDF1 F3
DFZpgF
GI6DGF
Z0[iM'
M0gdM'
0;/M't
cfZiCF
GFZ-hF
J'3B9
GFZufF
1 E1W0
2PZ9QF
FI6`GF
H(p*H6z
EI?FGF
gs8OMsX:
1!gI1cGF
tCHiEF
tCliEF
tCpiEF
tCHhEF
tC0hEF
tC|wEF
tC wEF
tClvEF
tC\uEF
K/CEFM
2;ZICF
1 j4_U
GF1 F2
GF1 FI6
cfZAFF
2V7'2J1#
"EF19X
KLEEFD
PDF19H
3+1!I6
[0VEF[
1!.I62GF
3'1!4I6
Dv[5GF
2\7'2P
PDF19H
3+1!I6
1!.I62GF
3'1!4I6
Dv[5GF
2\7'2P
2WZqGF
1'OI0_GF
GF12E2
GF1#OI7
GI6JGF
mLRCY:
gI4~GF
3o17C2
M[gFZ%
GF1'F3
3,11gI6
3_1!C38
Cu`3CI
GF[WGF
1 FI<pFF
FI>uGF
ShlGF9
S<jGF7
3n1#B3
G1!FI4HGF
|{<!EF
wN19F2
]I6%GF
FI6pGF
GF[WGF
M[gFZu
GF[JGF
S zGF7
m}0'2M'
GF[:GF
Cd|EFZ
KXEEF9
GF[RGF
cfZYGF
1Ou_X|d
GF[7GF
~s8@EF
B0k-M'
cb1#S:
{x]EF1;X
YEF1;X
_N19F2
c0+*M'
w3@]r[
n@ s:O
K&2JZ)VF
B0+'M'
GF11W2
CM@3EMBS
GMsaCF
GFs9OMsaFF
GFs9WMsaFF
GMsaCF
GFs9OMsaFF
EusaCF
EusaCF
GFs9WMsaFF
GMsaCF
GFs9OMsaFF
EusaCF
EusaCF
GF[uDF
cns0_I
cns1OI
cns1GI
tB8aCF
Kh6GF9
cns2WI
GMsQCb
GFs9OMsaFF
cNs1OI
cJs1GI
cJs1OI
cNs0_I
KXiGF9
tB8aCF
tB8aCF
cZs1OI
cVs1GI
cVs1OI
cRs1GI
cRs1OI
c^s1GI
tB8aCF
SCbs0_cM
SCbs0WcM
SCbs0OcM
tB8aCF
cBs0WcM
cZs2WI
cZs0_I
cJs0_cM
cJs0OcM
GFs9OMsaFF
GFs9WMsaFF
cJs2WI
tB8aCF
upSKbs1OI
cJs1GI
cBs1OI
cVs0_I
K0wGF9
cVs2WI
cRs2WI
c^s2WI
cVs0_I
GusaCF
SCbs0_cM
SCbs0WcM
SCbs0OcM
cBs0_cM
cBs0OcM
cZs0_I
GusaCF
cJs0WcM
DI?pEF
GF1dcn
GF1dcn
S\0GFZ
cVs2OI
zI6FGF
y07@M'
JD0CBM'
cfZ]MF
B0GDM'
B0sGM'
{WvFFM
zKOu2D
??<,,x
gWt\:b
Np]yBx
xTqMf@
["('>9
$%t};:J\01\A<=DU
,-de()li
!|qlm
23XGNO
*98NZz{
45TM'&rx
"#xw=<FV
?>BPbc
32ZDXY
]76RHyx
&'p{rs
4BOqa}
V{UYQ`
P\q|`|$
,B@gfs
g}jVE?
]zXgvqa
8T'fN}d
z@oNqMf@lZ}RgWt\VtKv]yBx@nYjKcPd"('>)%.0425"??<,
z*0.'9
5BxovOqa}Xjs`Uc}kv\WZ{UYQlNKLaGEG
-B@gfKNlkP\q|YRzqfxKRov@_td]H}jVE
zXgvtSj
fN}dhEpmBtSRL
^[^bI@PiDI1
M|v%k;vkm4
h;p@m4
H)i\RK
t&A#]tD
O3]$"j1
~`/gw
YAyv;S
_qgZ66
w0k/z3+
QZX4mK`t(
Ndtu!|
wH/l_k
$JU;|/
i:>v#\s0r
2H5Gvq
/X-E>
8IyzY5
)Mr(22*
"M*N5
~`!3:XQu
l7:A/B>
5L,52\EP
zj!v-V)2
$]?fql
2?>vGG
EgiS,`
/trOa:
$iG'5+R
Z0@7IJp
cwU!E\
VgDYZ%
Bor+Cwm
@I^pm
J<[:_]
&J:"h9
y;lKe6
W0^i`"
7'JDiE
3n9(C
%'k1<@
}[A$:R
AHxmh,
^pVCW5
FOaJX)7FN#
tuC;C{
yIC-Ja
Dr0r>6
!cfB^O
c3V%,}a
"KDq_d
Lc\A(D>
"x4U{E
9*Popw
qzzJ6w
R1Q!Qm~
Vz]FWz
v83&GF
%c%c%c%c%c%c%c%c%cMSSE-%d-server
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Mingw-w64 runtime failure:
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
.pdata
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 7.3-win32 20180312
GCC: (GNU) 7.3-win32 20180312
GCC: (GNU) 7.3-win32 20180312
GCC: (GNU) 7.3-win32 20180312
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 7.3-win32 20180312
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 6.3.0 20170415
GCC: (GNU) 7.3-win32 20180312
CloseHandle
ConnectNamedPipe
CreateFileA
CreateNamedPipeA
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery
WriteFile
__C_specific_handler
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_onexit
_unlock
calloc
fprintf
fwrite
malloc
memcpy
signal
sprintf
strlen
strncmp
vfprintf
KERNEL32.dll
msvcrt.dll
No antivirus signatures available.
No IRMA results available.