Static | ZeroBOX

PE Compile Time

2008-12-04 05:15:39

PE Imphash

3ad518cf51907bc8ca22f7a1354a4250

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00017c88 0x00018000 6.13877640705
.data 0x00019000 0x00001380 0x00001000 0.0
.rsrc 0x0001b000 0x000009c8 0x00001000 2.13960036229

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0001b488 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001b488 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001b488 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0001b458 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0001b150 0x00000308 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library MSVBVM60.DLL:
0x401000 _CIcos
0x401004 _adj_fptan
0x401008 __vbaVarMove
0x40100c __vbaFreeVar
0x401010 __vbaStrVarMove
0x401014 None
0x401018 __vbaEnd
0x40101c __vbaFreeVarList
0x401020 _adj_fdiv_m64
0x401024 __vbaFreeObjList
0x401028 _adj_fprem1
0x40102c __vbaRecAnsiToUni
0x401030 None
0x401034 __vbaSetSystemError
0x40103c __vbaLenBstrB
0x401040 None
0x401044 _adj_fdiv_m32
0x401048 None
0x40104c __vbaObjSet
0x401050 None
0x401054 _adj_fdiv_m16i
0x401058 __vbaObjSetAddref
0x40105c _adj_fdivr_m16i
0x401060 __vbaFpR8
0x401064 _CIsin
0x401068 None
0x40106c None
0x401070 __vbaChkstk
0x401074 None
0x401078 EVENT_SINK_AddRef
0x40107c None
0x401080 __vbaStrCmp
0x401084 __vbaObjVar
0x401088 DllFunctionCall
0x40108c _adj_fpatan
0x401090 __vbaLateIdCallLd
0x401094 __vbaRecUniToAnsi
0x401098 EVENT_SINK_Release
0x40109c _CIsqrt
0x4010a4 __vbaExceptHandler
0x4010a8 _adj_fprem
0x4010ac _adj_fdivr_m64
0x4010b0 None
0x4010b4 None
0x4010b8 __vbaFPException
0x4010bc None
0x4010c0 _CIlog
0x4010c4 __vbaErrorOverflow
0x4010c8 __vbaFileOpen
0x4010cc __vbaNew2
0x4010d0 __vbaInStr
0x4010d4 None
0x4010d8 _adj_fdiv_m32i
0x4010dc _adj_fdivr_m32i
0x4010e0 __vbaStrCopy
0x4010e4 __vbaFreeStrList
0x4010e8 _adj_fdivr_m32
0x4010ec _adj_fdiv_r
0x4010f0 None
0x4010f4 __vbaVarTstNe
0x4010f8 __vbaI4Var
0x4010fc None
0x401100 None
0x401104 __vbaLateMemCall
0x401108 __vbaVarAdd
0x40110c __vbaStrToAnsi
0x401110 __vbaVarDup
0x401114 None
0x401118 __vbaFpI4
0x40111c None
0x401120 _CIatan
0x401124 __vbaStrMove
0x401128 __vbaCastObj
0x40112c None
0x401130 _allmul
0x401134 __vbaLateIdSt
0x401138 _CItan
0x40113c __vbaFPInt
0x401140 _CIexp
0x401144 __vbaFreeObj
0x401148 __vbaFreeStr
0x40114c None

!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
kvoteres
Brneskeernes4
Antennesignal7
Antennesignal7
badstuer
Minusvksts
Timer2
Drive3
VScroll2
Option2
Samlebrnds
Command5
SHINTOISMENS
Frame2
GALLIWASP
Check2
CELLELAGENE
Combo2
Sonarer
Command4
pledgors
Command3
imprecision
Command2
FRILAND
Drive2
Drive1
Timer1
HScroll1
VScroll1
Combo1
HOVEDPROGRAMMET
Picture1
TIPPLERS
Frame1
Rochets
Command1
dissentism
Option1
Cleruchial4
Check1
untenacity
Label6
udflytterkommunens
Label5
Vandsamling1
Label4
arbejdslshedskrise
Label3
Walton1
Label2
Workbags
Label1
Uvejrenes
VB5!6&*
brtspillenes
kvoteres
kvoteres
kvoteres
Brneskeernes4
LOVGAV
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
Frame2
Command1
Check2
VScroll2
VScroll1
Command5
Option2
Drive2
Drive3
Timer1
Drive1
Combo1
Command2
Command4
Label5
Label3
Label6
Combo2
Timer2
HScroll1
Label4
Frame1
Label1
Option1
Command3
Label2
Check1
Picture1
rasapi32.dll
RasDialA
user32
LoadIconA
Advapi32
Amassing1
userenv.dll
GetAllUsersProfileDirectoryA
rpcrt4
UuidCreate
mpr.dll
WNetAddConnectionA
kernel32
GetFullPathNameA
TrackPopupMenu
MoveFileExA
AdjustWindowRectEx
advapi32.dll
GetAce
Escape
shell32.dll
SHGetFileInfoA
DdeFreeStringHandle
MoveWindow
wininet.dll
DeleteUrlCacheEntryA
lstrcmpA
SENSAPI.DLL
IsDestinationReachableA
CreatePalette
GetTokenInformation
ole32.dll
CoTaskMemFree
wininet
InternetOpenUrlA
ShowWindow
GetKeyboardLayoutNameA
shell32
smdevise
GUDDAS
PRETORTURE
CreatePolyPolygonRgn
WriteFile
GetDateFormatA
AppendMenuA
GetSystemMenu
DdeUninitialize
Forfinelserne
GetDiskFreeSpaceExA
GetTapeParameters
GetKeyState
winmm.dll
mmioClose
VerLanguageNameA
Insurmountably7
tumlingens
RHOMBENCEPHALA
Oxazine
VBA6.DLL
__vbaVarAdd
__vbaFPInt
__vbaFpR8
__vbaLenBstrB
__vbaVarTstNe
__vbaStrCmp
__vbaErrorOverflow
__vbaObjSetAddref
__vbaVarMove
__vbaFpI4
__vbaLateIdSt
__vbaFileOpen
__vbaRecAnsiToUni
__vbaRecUniToAnsi
__vbaVarDup
__vbaFreeVarList
__vbaInStr
__vbaEnd
__vbaCastObj
__vbaStrToAnsi
__vbaObjVar
__vbaLateMemCall
__vbaSetSystemError
__vbaI4Var
__vbaFreeVar
__vbaStrVarMove
__vbaLateIdCallLd
__vbaFreeObjList
__vbaFreeStr
__vbaStrMove
__vbaFreeObj
__vbaFreeStrList
__vbaStrCopy
__vbaHresultCheckObj
__vbaNew2
__vbaObjSet
LOVGAV
oraklerne
&,}*]k
&,}*]k
:nK'~n
"U8Xq,P
:nK?{n
PVs~h
? PnH4
/bPnH0
bJTWiF
6WbJP
pgaA8W
$v ]$o
^$PnH4
mPnKnVn
[ $'H4
!Pn(UpWp
(dtf(|tj
((6WiUg
P9\U<
}oU'Pk
Qn*Up
pUn"e@
Pn#TR
PQa'(Qn
1k? Pn
'e$^n
Pnd`X
+ Pne$[7H0
!Pn"^tn
J PnH4
2 Pn"^t
P9KTWn
PndgTs
4Pn*gX
_ PnK-
Pa&oSn
'!PnH0
Pa&/Qn
QVWJZ
{9PnH4
[(dtF( lk
!PnK>yn
K*|tF(
",Pn,e4
Snde,n
w PnK9bn
W PnJ{
C PnKM`n
w4Pn*e|
4Pn*e`Vi
4Pn*el
!Pn(mH
Y.kjK#Cn
Q/e1o
( U?v3
KLsu?+
Pn#ZT2
P^7)1\
Z%PnH0
aTLI/9
Pn(`\
aTLI/9
aTLI/9
i"PnH0
$T _D.
VO!\JK
*dtv(mL
t*ltf*|tj
#HQy#HQpH4
e`R,#`R
!Pn*pS
#`WPe`X
#PX-#HX(#HXH0
-Yn6Wb
odcUTf(P
a<PVNFi
Ln(|tj(dtj
(dtr(ltj*
}4&($uv
!Pn(h@
'(jX'(z@9
_k`jkj
!Pn XXn
0Pa&0Qn
C~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
fccccccccccccccccccccccccccccccccccccccccc1
1mmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm
hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
m~,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
n%<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
8'''''''''''''''''''''''''''''''''''''
Pq^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
6&]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
(T;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
oraklerne
HJEMLENDE
undebauchedness
Moluche
sinistrally
Andenklasseskupeens
Tylarus8
MASKINSTORMERE
chromotypy
Involves
Dahlias
MAGNETOD
Manufact1
FEJNINGERS
JUBILIZATION
GONOPOIETIC
Unfurnish4
Renovationsvsens5
bordigas
SPILLEDAASES
Slagfrdigste
grenfag
minimumslsninger
SYGEMELDINGSBLANKETS
} jHh0J@
} jHh\J@
} jphlJ@
} jhh\J@
} j`hTK@
} j`h\J@
} j`hlJ@
} jHh\J@
} j`h|J@
} jXhhL@
} jhh\J@
} jhh\J@
} j`hhL@
} j`h\J@
} j`hdK@
} jXh$M@
} jHhlJ@
} j`h\J@
} j\hhL@
} jXh|J@
} jHhlJ@
} jXhhL@
} jdhhL@
} j`hLM@
jXhhL@
0;hBhA
jdhD;@
jhh\J@
} jhhlJ@
MSVBVM60.DLL
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaRecAnsiToUni
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenBstrB
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaFpR8
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaObjVar
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarTstNe
__vbaI4Var
__vbaLateMemCall
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
__vbaFpI4
_CIatan
__vbaStrMove
__vbaCastObj
_allmul
__vbaLateIdSt
_CItan
__vbaFPInt
_CIexp
__vbaFreeObj
__vbaFreeStr
DONNA1
Furbishment61
desserttallerkenerne1
utilization1
Underturnkey81"0
DEALINGS@quatres.SU0
210518131612Z
220518131612Z0
DONNA1
Furbishment61
desserttallerkenerne1
utilization1
Underturnkey81"0
DEALINGS@quatres.SU0
/h{Y7=
DONNA1
Furbishment61
desserttallerkenerne1
utilization1
Underturnkey81"0
DEALINGS@quatres.SU
(8S8)Xm3
Reshuffled3
Autostolen2
VIRKELIGHEDSTRO
Biocellate
Hirsutulous4
Hovedhensyn2
opfriskes
Sacroiliacs1
spontanister
TIRSDAGSMDETS
qN9qCdi1SvvwocWQESHnR1dnA12GAzVE3114
modelskitser
KLANTERN
PULSEN
RUGNINGERNE
kopiens
braggite
PREDOMESTICALLY
Raabere4
ochlesis
Subsultory9
Konkurrencedygtigt
Proklitisk
Fjerdragternes
noncondensation
potties
Fixene
12-12-12
Surmlksprodukt
fertilitetens
Forberedelseseksaminerne4
Farvefabrikker
Acaridean9
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
040904B0
Comments
Nexus Corporation
CompanyName
Nexus Corporation
LegalCopyright
Nexus Corporation
LegalTrademarks
Nexus Corporation
ProductName
kvoteres
FileVersion
ProductVersion
InternalName
brtspillenes
OriginalFilename
brtspillenes.exe
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Jaik.45934
FireEye Generic.mg.331795ffdb6c9f69
CAT-QuickHeal Clean
McAfee Artemis!331795FFDB6C
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Clean
Sangfor Clean
K7AntiVirus Trojan ( 0057c9e21 )
BitDefender Gen:Variant.Jaik.45934
K7GW Trojan ( 0057c9e21 )
Cybereason Clean
Baidu Clean
Cyren W32/VB.TE.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Injector.EPJA
APEX Malicious
Avast Win32:Malware-gen
ClamAV Clean
Kaspersky Trojan.Win32.Agent.xahrja
Alibaba Trojan:Win32/VBInject.25d9233f
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.Injector!8.C4 (CLOUD)
Ad-Aware Gen:Variant.Jaik.45934
Emsisoft Trojan.GenericKD.36928676 (B)
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro TROJ_GEN.R014C0DEJ21
McAfee-GW-Edition PWS-FCYQ!331795FFDB6C
CMC Clean
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
GData Win32.Trojan-Downloader.GuLoader.CA7B55
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/VBInject.PKI!MTB
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Gen:NN.ZevbaF.34690.gm1@aSKmaNli
ALYac Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Malware.AI.644347329
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R014C0DEJ21
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet W32/Kryptik.EPJA!tr
AVG Win32:Malware-gen
Paloalto generic.ml
CrowdStrike win/malicious_confidence_60% (W)
Qihoo-360 Clean
No IRMA results available.