Static | ZeroBOX

PE Compile Time

2014-06-18 08:35:40

PE Imphash

c4b3ef5cd2bacd05c5793b6be4b1aeae

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00042254 0x00043000 5.67025375739
.data 0x00044000 0x000020d4 0x00001000 0.0
.rsrc 0x00047000 0x00029b40 0x0002a000 4.7878940195

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000475d8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0004751c 0x000000bc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00047330 0x000001ec LANG_NORWEGIAN SUBLANG_NORWEGIAN_BOKMAL data

Imports

Library MSVBVM60.DLL:
0x401000 None
0x401004 _CIcos
0x401008 _adj_fptan
0x40100c __vbaFreeVar
0x401010 __vbaStrVarMove
0x401014 __vbaFreeVarList
0x401018 _adj_fdiv_m64
0x40101c __vbaFreeObjList
0x401020 None
0x401024 _adj_fprem1
0x401028 __vbaSetSystemError
0x401030 _adj_fdiv_m32
0x401034 __vbaAryDestruct
0x401038 __vbaObjSet
0x40103c __vbaOnError
0x401040 _adj_fdiv_m16i
0x401044 None
0x401048 _adj_fdivr_m16i
0x40104c None
0x401050 None
0x401054 _CIsin
0x401058 __vbaChkstk
0x40105c EVENT_SINK_AddRef
0x401064 __vbaStrCmp
0x401068 __vbaAryConstruct2
0x40106c __vbaR4Str
0x401070 DllFunctionCall
0x401074 _adj_fpatan
0x401078 EVENT_SINK_Release
0x40107c _CIsqrt
0x401084 __vbaExceptHandler
0x401088 _adj_fprem
0x40108c _adj_fdivr_m64
0x401090 __vbaFPException
0x401094 None
0x401098 _CIlog
0x40109c None
0x4010a0 __vbaNew2
0x4010a4 _adj_fdiv_m32i
0x4010a8 None
0x4010ac _adj_fdivr_m32i
0x4010b0 __vbaStrCopy
0x4010b4 _adj_fdivr_m32
0x4010b8 _adj_fdiv_r
0x4010bc None
0x4010c0 __vbaLateMemCall
0x4010c4 None
0x4010c8 __vbaStrToAnsi
0x4010cc None
0x4010d0 __vbaFpI4
0x4010d4 _CIatan
0x4010d8 __vbaStrMove
0x4010dc __vbaCastObj
0x4010e0 None
0x4010e4 _allmul
0x4010e8 _CItan
0x4010ec _CIexp
0x4010f0 __vbaFreeStr
0x4010f4 __vbaFreeObj
0x4010f8 None

!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
Project5
Knledetsscore
Aethersfigeners
rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
5Ve1q-f
(MUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUOq
mmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm
~****************************
VPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP
s$b[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[
lOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO
[m=+D:
X-H>'"
"Q2JNc`
h}h=0D:
J3})H
"_,b~I
U,v):2
cZ"hc`
\#46Mq
05+dbq
SeN;DH
mjKKfa
cZlSc`
rODS{d
rODS{d
)F20!"
X-'Ren(I
;v"H:=2
c&!s4I
c_@'c`
'a7Laa7
JL.jDH
d'a6PaI6T`
941}DH
0Gug#e
Ds.$DL
fngfvnf
fnlffnnlff
llfll|l~lvnn
llflfo
flffff
ffffffffffffffffffffffflg|llllllllllllllllh
~v~v~vv
nnnnnnnh
ffffffh
flflff
ghggghw
tttttttttttttttttttttt
MN]]]]]]]]]]]]]]]]]]]]]]w
bbC66:::Bbbbbbbb
;;;;;;;
;;;;;;;
==( (=======
LLLLLLLLLLLLd
_LLLLLLLLLLLLJ
_IIIIIIIIIIIIJ
_IIIIIIIIIIIII
XIHIHIHIHIHIHI
X;;;;;;;;;;;;;
W;;H;H;H;H;H;;
333333333333w
%" ## ## ## ## ## ## ## #%%"##"%3%%3%%%%#
u:77:77:77:77:77:77:77:77:77C:77:77:77:77::u
@>>>>>>>>>>>>>>>T^ffw{}
?QbbbbbbbbbbbbbbaW
(MEFFFNOOOO(P:o
------,,/
s+++++++++
s*********
s"*"*"*"*"
s"""""""""
H]]]]]]]]]]]]]]]]]]]]]]]]]]]]H
JRStLc
)"""""""(558=?:8#KKKKKKK
#NKAA@AK2/.033-+"NK?AAAK6:@KNN=6!NAAAAAK6<@KNN=6!NKAAFFKA==@AA:+NNNJKKNN;<AAA:
JN;AGGK9
EN:@KK@;
EKGDAADF
EKKA@<=N
ENADKKFN
N1$$$%NNNNKFKN
KKKKKKKKKKKKFK
Aethersfigeners
Command1
Screenchl
Check2
SCAPHOGN
Option2
Anthropoce8
Check1
Tankeforbi4
Option1
turnerermo
Combo2
Sanidini4
Combo1
Bevidsthe2
VB5!6&*
Gjordedes5
Project5
Project5
Project5
Knledetsscore
rensningsfo
Aconativeme
Gladston3
Arghooll7
Combo2
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
Combo1
Option2
Option1
Command1
Check1
Check2
mpr.dll
WNetGetConnectionA
user32
BringWindowToTop
shell32
SHFormatDrive
kernel32
GetFileAttributesA
SCISSORSBIRD
VBA6.DLL
__vbaAryDestruct
__vbaFpI4
__vbaStrToAnsi
__vbaOnError
__vbaSetSystemError
__vbaLateMemCall
__vbaFreeVarList
__vbaCastObj
__vbaGenerateBoundsError
__vbaStrCopy
__vbaR4Str
__vbaFreeObjList
__vbaObjSet
__vbaFreeObj
__vbaHresultCheckObj
__vbaNew2
__vbaStrVarMove
;__vbaFreeVar
__vbaFreeStr
__vbaStrMove
__vbaStrCmp
__vbaAryConstruct2
Gladston3
Bawdinesse8
Bawdinesse8
Aconativeme
Coenocytefi5
Coenocytefi5
rensningsfo
transferaser
transferaser
patosens
pecunious
MSVBVM60.DLL
_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaAryConstruct2
__vbaR4Str
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
__vbaLateMemCall
__vbaStrToAnsi
__vbaFpI4
_CIatan
__vbaStrMove
__vbaCastObj
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
)"""""""(558=?:8#KKKKKKK
#NKAA@AK2/.033-+"NK?AAAK6:@KNN=6!NAAAAAK6<@KNN=6!NKAAFFKA==@AA:+NNNJKKNN;<AAA:
JN;AGGK9
EN:@KK@;
EKGDAADF
EKKA@<=N
ENADKKFN
N1$$$%NNNNKFKN
KKKKKKKKKKKKFK
@>>>>>>>>>>>>>>>T^ffw{}
?QbbbbbbbbbbbbbbaW
(MEFFFNOOOO(P:o
------,,/
s+++++++++
s*********
s"*"*"*"*"
s"""""""""
H]]]]]]]]]]]]]]]]]]]]]]]]]]]]H
JRStLc
tttttttttttttttttttttt
MN]]]]]]]]]]]]]]]]]]]]]]w
bbC66:::Bbbbbbbb
;;;;;;;
;;;;;;;
==( (=======
LLLLLLLLLLLLd
_LLLLLLLLLLLLJ
_IIIIIIIIIIIIJ
_IIIIIIIIIIIII
XIHIHIHIHIHIHI
X;;;;;;;;;;;;;
W;;H;H;H;H;H;;
333333333333w
%" ## ## ## ## ## ## ## #%%"##"%3%%3%%%%#
u:77:77:77:77:77:77:77:77:77C:77:77:77:77::u
ghggghw
nnnnnnnh
ffffffh
flflff
fngfvnf
fnlffnnlff
llfll|l~lvnn
llflfo
flffff
ffffffffffffffffffffffflg|llllllllllllllllh
~v~v~vv
Samfundsvidenskabelig8
snderlemnings
ordrebehandlingen
brandsikre
wonderwoman
VINYLETS
Melada
Pelopidae5
Myomorpha9
NONCONFORMITANT
Bestandiges6
SANDFLUGTENS
chronologers
Konverteringsprogrammet
baccaras
Diazepams5
Terram4
apogeny
Superosculate1
Geminate8
UNDERDELENES
deoxycorticosterone
SIMULANTENS
OPLAGENES
diuron
PIASSAVAS
Sheepsteal
Fjedrede7
Nonhallucinated9
Strettas
Barbacou9
SEATMATE
exclosures
KRYDDERFEDTETS
OCCASIONALNESS
Skorstensfejermestre
Neurochorioretinitis
Pamaceous
Q0BZXEZ8VMJ67
Taabenakkernes
Floridans7
skrmbilledteksten
Lagerbeholdningerne
lbebanernes
kamelaukions
Jerkins
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
041404B0
ProductName
Project5
FileVersion
ProductVersion
InternalName
Gjordedes5
OriginalFilename
Gjordedes5.exe
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Razy.916543
CMC Clean
CAT-QuickHeal Clean
McAfee RDN/Generic.grp
Cylance Unsafe
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Gen:Variant.Razy.916543
K7GW Clean
Cybereason malicious.640f12
Baidu Clean
Cyren W32/VBKrypt.AZO.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/GenKryptik.FJTP
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Trojan:Win32/GenKryptik.e42893df
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Gen:Variant.Razy.916543
TACHYON Clean
Emsisoft Gen:Variant.Razy.916543 (B)
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Worm.gm
FireEye Gen:Variant.Razy.916543
Sophos Mal/Generic-S
Ikarus Win32.Outbreak
GData Gen:Variant.Razy.916543
Jiangmin Clean
Webroot W32.Worm.gm
Avira Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Gen:Variant.Razy.916543
MAX malware (ai score=83)
Malwarebytes Malware.AI.4129293227
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Suspicious PE
eGambit Unsafe.AI_Score_99%
Fortinet W32/Agent.FCI!tr
BitDefenderTheta Gen:NN.ZevbaF.34126.Bm0@aqeH!UeG
AVG FileRepMalware
Avast FileRepMalware
CrowdStrike win/malicious_confidence_90% (W)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.