popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

PE Compile Time

2019-07-26 22:19:42

PE Imphash

9289785ed510393f7fc81c3646d3f66d

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00002250 0x00003000 4.4002833083
.data 0x00004000 0x00000384 0x00001000 0.0
.rsrc 0x00005000 0x00000a7c 0x00001000 2.33609073353

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0000553c 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0000553c 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0000553c 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0000550c 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00005150 0x000003bc LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library MSVBVM60.DLL:
• 0x401000 _CIcos
• 0x401004 _adj_fptan
• 0x401008 __vbaVarMove
• 0x40100c __vbaFreeVar
• 0x401010 __vbaLenBstr
• 0x401014 __vbaFreeVarList
• 0x401018 _adj_fdiv_m64
• 0x40101c _adj_fprem1
• 0x401020 __vbaStrCat
• 0x401024 __vbaSetSystemError
• 0x401028 _adj_fdiv_m32
• 0x40102c __vbaOnError
• 0x401030 _adj_fdiv_m16i
• 0x401034 _adj_fdivr_m16i
• 0x401038 __vbaBoolVarNull
• 0x40103c _CIsin
• 0x401040 __vbaChkstk
• 0x401044 DllFunctionCall
• 0x401048 __vbaVarLateMemSt
• 0x40104c _adj_fpatan
• 0x401050 _CIsqrt
• 0x401054 __vbaVarAnd
• 0x401058 __vbaExceptHandler
• 0x40105c __vbaStrToUnicode
• 0x401060 None
• 0x401064 _adj_fprem
• 0x401068 _adj_fdivr_m64
• 0x40106c __vbaFPException
• 0x401070 __vbaStrVarVal
• 0x401074 None
• 0x401078 None
• 0x40107c _CIlog
• 0x401080 __vbaErrorOverflow
• 0x401084 _adj_fdiv_m32i
• 0x401088 _adj_fdivr_m32i
• 0x40108c __vbaStrCopy
• 0x401090 __vbaFreeStrList
• 0x401094 _adj_fdivr_m32
• 0x401098 _adj_fdiv_r
• 0x40109c None
• 0x4010a0 __vbaI4Var
• 0x4010a4 __vbaVarCmpEq
• 0x4010a8 __vbaStrToAnsi
• 0x4010ac None
• 0x4010b4 __vbaVarCopy
• 0x4010b8 _CIatan
• 0x4010bc __vbaStrMove
• 0x4010c0 _allmul
• 0x4010c4 _CItan
• 0x4010c8 _CIexp
• 0x4010cc __vbaFreeStr
!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
RRTexture
Perlin
RRTexture
RRTexture
Module2
Module1
RRTexture
advapi32.dll
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
VBA6.DLL
__vbaFreeVar
__vbaFreeStrList
__vbaI4Var
__vbaStrVarVal
__vbaVarCopy
__vbaVarMove
__vbaOnError
__vbaFreeVarList
__vbaVarLateMemCallLd
__vbaVarCmpEq
__vbaVarAnd
__vbaBoolVarNull
__vbaVarLateMemSt
__vbaErrorOverflow
__vbaLenBstr
__vbaStrCat
__vbaStrMove
__vbaFreeStr
__vbaStrToUnicode
__vbaSetSystemError
__vbaStrToAnsi
__vbaStrCopy
MSVBVM60.DLL
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
_adj_fdiv_m32
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaChkstk
DllFunctionCall
__vbaVarLateMemSt
_adj_fpatan
_CIsqrt
__vbaVarAnd
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
__vbaI4Var
__vbaVarCmpEq
__vbaStrToAnsi
__vbaVarLateMemCallLd
__vbaVarCopy
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
C:\Users\Adm
@*\AC:\Users\Admin\Desktop\A Lotta No207586720\A Lotta No20758672001
\RRTexture.vbp
Software\Privacy Tools NL
AAAWN0\APodraz10
Caption
AAAWN0
AAAWN0\GLAWN0
AAAWN0\GLAWN0\Podra00
Enabled
BackColor
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
040904B0
CompanyName
A long integer graphic surface has the advantage in that it can more easily be dealt with using
FileDescription
A long integer graphic surface has the advantage in that it can more easily be dealt with using
ProductName
RRTexture
FileVersion
22.11.0077
ProductVersion
22.11.0077
InternalName
Perlin
OriginalFilename
Perlin.exe
Antivirus Signature
Bkav W32.FamVT.AgardCT.Trojan
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.35157951
FireEye Trojan.GenericKD.35157951
CAT-QuickHeal Trojan.Agent
McAfee Generic Trojan.iq
Cylance Unsafe
Zillya Trojan.PrivacyToolSu.Win32.1
Sangfor Trojan.Win32.Agent.EDSW
K7AntiVirus Trojan ( 005607381 )
BitDefender Trojan.GenericKD.35157951
K7GW Trojan ( 005607381 )
Cybereason malicious.07d012
Arcabit Clean
BitDefenderTheta Clean
Cyren W32/Trojan.PXOD-6408
Symantec Clean
ESET-NOD32 MSIL/PrivacyToolSu.B
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky Clean
Alibaba Trojan:MSIL/PrivacyToolSu.e5249181
NANO-Antivirus Trojan.Win32.PrivacyToolSu.htfbrk
ViRobot Clean
Avast Clean
Tencent Malware.Win32.Gencirc.11c3d51d
Ad-Aware Trojan.GenericKD.35157951
Emsisoft Trojan.GenericKD.35157951 (B)
Comodo Malware@#tt8ycje1055h
F-Secure Clean
DrWeb Trojan.Siggen9.55628
VIPRE Trojan.Win32.Generic!BT
TrendMicro Trojan.Win32.PRIVATOOL.REG
McAfee-GW-Edition Generic Trojan.iq
CMC Clean
Sophos Mal/Generic-R
SentinelOne Clean
Jiangmin Trojan.Generic.gzbio
Webroot W32.Rogue.Gen
Avira Clean
MAX malware (ai score=99)
Antiy-AVL Trojan/Generic.ASMalwS.2C23F94
Kingsoft Clean
Gridinsoft Trojan.Win32.Gen.ba
Microsoft Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Trojan.GenericKD.35157951
Cynet Clean
AhnLab-V3 Malware/Win32.Generic.C3369194
Acronis Clean
VBA32 TScope.Trojan.VB
ALYac Trojan.MSIL.PrivacyToolSu
TACHYON Clean
Malwarebytes Trojan.Injector.VB
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.PRIVATOOL.REG
Rising Clean
Yandex Trojan.PrivacyToolSu!9LP1IysdRSg
Ikarus Trojan.Agent
eGambit Clean
Fortinet W32/Trojan.IQ!tr
Qihoo-360 Win32/Trojan.Generic.HgIASOYA
Panda Clean
CrowdStrike win/malicious_confidence_100% (W)
MaxSecure Trojan.Malware.74473450.susgen
No IRMA results available.