Static | ZeroBOX

PE Compile Time

2012-12-21 04:31:07

PE Imphash

c727a98e677fb7bd25bb06d2a2d956f1

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0001a9b0 0x0001b000 6.7929620559
.data 0x0001c000 0x00000af0 0x00001000 0.0
.rsrc 0x0001d000 0x0000456a 0x00005000 4.61708337559

Resources

Name Offset Size Language Sub-language File type
DATA 0x0001da7c 0x00003aee LANG_ENGLISH SUBLANG_ENGLISH_US MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
RT_ICON 0x0001d53c 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001d53c 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001d53c 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0001d50c 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0001d1a0 0x0000036c LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library MSVBVM60.DLL:
0x401000 _CIcos
0x401004 _adj_fptan
0x401008 __vbaVarMove
0x40100c None
0x401010 __vbaFreeVar
0x401014 __vbaStrVarMove
0x401018 None
0x40101c __vbaFreeVarList
0x401020 _adj_fdiv_m64
0x401024 _adj_fprem1
0x401028 None
0x40102c None
0x401030 __vbaSetSystemError
0x401038 __vbaLenBstrB
0x40103c _adj_fdiv_m32
0x401040 None
0x401044 __vbaAryDestruct
0x401048 None
0x40104c None
0x401050 __vbaOnError
0x401054 None
0x401058 __vbaObjSet
0x40105c _adj_fdiv_m16i
0x401060 None
0x401064 __vbaObjSetAddref
0x401068 _adj_fdivr_m16i
0x40106c None
0x401070 None
0x401074 None
0x401078 None
0x40107c None
0x401080 __vbaFpR8
0x401084 _CIsin
0x401088 __vbaChkstk
0x40108c EVENT_SINK_AddRef
0x401094 __vbaStrCmp
0x401098 __vbaAryConstruct2
0x40109c __vbaObjVar
0x4010a0 None
0x4010a4 DllFunctionCall
0x4010a8 None
0x4010ac _adj_fpatan
0x4010b0 __vbaRedim
0x4010b4 EVENT_SINK_Release
0x4010b8 None
0x4010bc _CIsqrt
0x4010c4 __vbaExceptHandler
0x4010c8 _adj_fprem
0x4010cc _adj_fdivr_m64
0x4010d0 __vbaI2Str
0x4010d4 None
0x4010d8 __vbaFPException
0x4010dc None
0x4010e0 _CIlog
0x4010e4 None
0x4010e8 __vbaNew2
0x4010ec _adj_fdiv_m32i
0x4010f0 _adj_fdivr_m32i
0x4010f4 None
0x4010f8 __vbaStrCopy
0x4010fc __vbaI4Str
0x401100 __vbaDerefAry1
0x401104 _adj_fdivr_m32
0x401108 _adj_fdiv_r
0x40110c None
0x401110 None
0x401114 None
0x401118 None
0x40111c __vbaStrToAnsi
0x401120 __vbaVarDup
0x401124 None
0x401128 __vbaFpI4
0x40112c __vbaLateMemCallLd
0x401130 _CIatan
0x401134 __vbaStrMove
0x401138 _allmul
0x40113c __vbaLateIdSt
0x401140 _CItan
0x401144 _CIexp
0x401148 __vbaFreeObj
0x40114c __vbaFreeStr

!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
Leptopel
Shoutb6
Shoutb6
Timer1
Timer2
KONDEM
RADBRKKE
Udtagene1
fremtid
Gensta
Markedsop
BLINDSM
Wedde8
Nonpoint
Testedees
FABRIKSFR
homone
Outtr2
tubulat
Rrenes
CYPRES
Scenefunk1
Skadesfor8
Micropho8
DIALOGIS
EPANAPHO
Catch5
Korpus5
freeloade
LIFTERABS
Seeliness3
hvislel
unwaile
forest
sampling
equalise
UTICKW
Bebyrde6
bjrgedesm
COPLOTHN
monodra
HJEMMEH
Agtpa1
Kalkulati7
Konfer
Twatsopht8
GLEANINGK
Ilford
Paulini3
S:::::::::::::::::::::::::::::::::::::::::::::::::
;h###############################################################
q+++++++++++++++++++++++++++++++++++++++++++++++
]lKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK
1VKQG_____________________________________________
Y////////////////////////////////////////////////////
Y-/PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP
+==G[_8
)nYUI&
tAbsAt
nY_0G[
XGt_UW
wROAnWB
AmQ(6=
UsW8q[
|5yUzM
2GQWAk
?[+`+KjVuAu
)Aj\H<
5+1Zl/3Rxe
#'Ac/}6
RK*V*$
BJBW=nX
nVR\hY
nY)8nX
nY>EzY
X\&Yb?G
0E;r3)
W{vPa6
nY)8NX
&j0gi
>A1PAn
WKD_R/
MWJn[
[UMl?_
aI>5uHrj)l
j[8#]
nVRwoY
Aa1p|*}l
J~F61^#
&`eD}u
H3 UV@Am
<2ggmT
nVRXoY
nY_81[
[XSunY
p?_0_[
) +);H
Z3>904\jd#
pW|y^}
]_<W]M
nY_N=?
nYUMv?
<?lJ7?
0}WvNY
~Dx?SN
0}WvNY
nVR'nY
J)UKo4
nY_ekU
=?m")?
=?mH7?
Z}X'Q-
WWbY:0
nYWt|(
nYWt6B
nY_N=a#
nY K`?SO
nY):jQ
nVS9nY
nVSNCY
O%1>9
nY>oYY
nY_NxN=
nYVp73
G5m-\&/(d#
\*N6]Y
)XwY>r
J]>TlY
[UMl?]
nY?i@Y
nVSnnY
@[nW:#a8
+S+RTrMXK
aVqVVS
+YW8][
nY_ZU%
x?Uwn?]
nVS]NY
?!K}VW
*;5pcunY
n?Wtag
?S_[}in
?SMVZ]
YUNdh
nVRwnY
n?Wr(SSNV
_b[ooY
+qFef[
N'?Ws@
,Q-PVpUMj
,>23)r.
o&ZR_kXG
VB5!6&*
Unemploy
MADMDRE
Leptopel
Leptopel
Metopa
}8T@Zu
homone
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
LIFTERABS
Gensta
Agtpa1
Konfer
hvislel
Paulini3
FABRIKSFR
forest
DIALOGIS
Nonpoint
COPLOTHN
Ilford
fremtid
equalise
Twatsopht8
tubulat
BLINDSM
Bebyrde6
sampling
Catch5
KONDEM
Timer1
Timer2
Scenefunk1
GetTextExtentPoint32A
kernel32
FileTimeToSystemTime
winmm.dll
waveOutGetErrorTextA
user32
GetWindow
timeGetTime
DestroyMenu
Skaftets
Zamarra2
Sanseverdenernes8
VBA6.DLL
__vbaObjSet
__vbaFpR8
__vbaI4Str
__vbaLenBstrB
__vbaDerefAry1
__vbaRedim
__vbaVarDup
__vbaAryDestruct
__vbaAryConstruct2
__vbaGenerateBoundsError
__vbaStrCopy
__vbaLateMemCallLd
__vbaObjVar
__vbaVarMove
__vbaObjSetAddref
__vbaStrToAnsi
__vbaFpI4
__vbaSetSystemError
__vbaFreeStr
__vbaStrCmp
__vbaI2Str
__vbaFreeVar
__vbaLateIdSt
__vbaOnError
__vbaFreeVarList
__vbaStrVarMove
__vbaFreeObj
__vbaHresultCheckObj
__vbaNew2
__vbaStrMove
user32
GetWindowTextA
GetWindowTextLengthA
VirtualProtect
WritePrivateProfileSectionA
WriteConsoleA
Hjorten
Repetitr
Whiffleries
investigating
Kortsigtede5
programmrernes
Concurso
} jHhx+A
jLhx+A
j(h4LA
MSVBVM60.DLL
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenBstrB
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaFpR8
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaAryConstruct2
__vbaObjVar
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
__vbaStrToAnsi
__vbaVarDup
__vbaFpI4
__vbaLateMemCallLd
_CIatan
__vbaStrMove
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
keelage
naalefaelde
Integer
kvindens
gadeteater
arX4FknQsNKDKfKR99
NONMITIGATORY
Kagekonen
SMAAORDETS
marmennill
Forpurring
Epexegesis7
tassie
verbets
Calistheneum
NORMALTILSTANDES
Embedslge5
SKRNTEN
anslagets
SPOTMARKEDERNES
saapas
orknsk
bregnemos
wormils
Pentalogue5
Nachas9
NONDENIAL
Besvaret6
Polymastodon
SANGTEKSTERNES
ciceroning
Korrekturs
badger
Dietotoxic5
Tetrakaidecahedron4
appliable
Supinates1
Geognostic8
UNDERHUSES
deregulated
SIRUPS
OPPARINGSFORMLEN
Plasmodic6
dodecarchy
PIGGYBACKING
Shiplessly
Fjolre7
Erhversindkomst
Nonleafy9
Stubbornest
Barre9
SEGMENTAL
exoderm
KRLNINGERS
ODIBLE
Memorising
Skovsavenes
Nichevo
Pansexuality
TROMBONISTS
STVERJAGTEN
DEDIFFERENTIATING
sanitisation
GUMLEDES
Nonvenally
REHNGERS
Acromiocoracoid7
Arbejdsmiljraadet5
preachiest
COLOCATE
intercrinal
Anglisten
Frsteopfrelses9
vialful
Outcutting
Klotilde
protosulphate
Billedtelefonen
Befstendes
CHELURA
agraffernes
heroisation
Recordists
afkappes
Dyppelsens4
lenstidernes
vaskepulver
Darkened4
RAPPORTOPGAVEER
Hederiform
culicids
FIELDIE
Irrefrangibility5
udsendelseslederes
Frakendes8
Strukturelt5
Rgisseur
Inappropriately4
Rodekontors7
Blunger
CARPHOLITE
AGGRESSIVE
Unwasting8
Amylohydrolysis7
servable
SKATEBOARDERS
selvbyggede
Almanaks4
unservice
Degenereringer
empressment
alphyl
tvrskibes
Tartrazinen7
Coastman9
Byggeklodsernes
TOLDPLIGTIGES
MICROPTERYGIDAE
Brysthulers8
maaleglas
Certainly8
ILDNENDES
industrivirksomheden
Forvnnendes
CRUDITIES
Sentineled7
VANSMGTES
Pisistratidae4
Perlon2
filterbreddernes
Unboundedly4
kapitl
ranular
kroopholdenes
menneskevens
Stabelvarer2
STOFTRYKKENE
Sansculotters
Caribiers
Stratum3
Scutulate
Foretrukket
SPLAYMOUTH
Omskiftning
Bltedrevne8
CIRKUSFORESTILLINGER
exalate
Kohekohe3
Ballettomanen3
embace
Appreteringers2
verdensstandard
Brandaktuel7
interessegruppers
foranlediget
Fallation5
tykhuder
TANGENTIAL
Jawhole
Untowardly
Palladiumises
fuselager
Debatoplgget
Fiskeriinteresse
HISTORICISME
WEAPONMAKING
unikaene
restaurationsklausul
SIMPLIFICTION
Recarpet6
GRNKLDT
MASKEPI
Godkendelsesbefjelse
bekendtgrelses
Blomstrende
Afgangstidspunktets9
Nonsobering8
Sharklike
Rundormes
Samarbejdsorganisation5
Falholdes3
Systemsikkerhed
azodisulphonic
Ensomheden
ABSURDISTERNE
lsefagene
fjortenere
Monoglyceride2
Attorneyship
Tilskrersakse1
PADDLE
urernes
Eudaemonist7
Benedictus
frtidspensions
Dismount5
BIRDLAND
solitrrings
Microspectrophotometer
geometriform
TRANSFORMERINGS
Nonvirtuous3
Misstemninger1
raakostjerns
Granskendes3
hankns
PERIOTIC
indkrer
konstaterings
Sidsels2
EMULSIFIABILITY
CILICISM
Begejstringers6
Paategnings
WHISKYSJUSSERS
PROTROPICAL
Eftermiddagsudgaverne5
Skeletogenous
fdrenehjem
EXOPLASM
Oppositionelle
darter
Heelers3
zoomorphize
aneurysmatic
VATIKANS
FINOPTLLINGEN
ABSENTMINDEDLY
BAGATELLES
haganah
gjordens
selvfinansiere
Delimitizes4
honeydewed
SERVOMECHANICS
Hmsko5
Gummistvles
Cannetille1
Illustrious
Rykning
TOPECTOMIES
almisserne
Jointers6
READJUDICATED
Phasmatoidea6
HALVTAGENES
FORBUNDSSKOLES
KOLONISR
Fljaltre7
Mendicant1
STORMKROGENE
treponemas
KUFFERTEN
Quethe
Carreau
Polstringers5
dehydrering
TALBLINDES
Sammenhngskrfters1
Compiler3
PRIMOVIOLINERNE
besvrliggrelsens
Relates
STINTER
Ekstraktionernes
Drvtygges
Skvisendes
Pantelephone5
mettelines
Interstream
Byggemyndighedernes2
hurraerne
admires
Odontologst
ascriptive
irakerens
Omslyngning3
NANOSOMA
Polarograph
EMBEGGAR
peptogen
Hawfinch3
Gregarinian
Sprinkelvrkernes
Inferencing
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
040904B0
Comments
RealNetworks, Inc.
CompanyName
RealNetworks, Inc.
FileDescription
RealNetworks, Inc.
LegalCopyright
RealNetworks, Inc.
LegalTrademarks
RealNetworks, Inc.
ProductName
RealNetworks, Inc.
FileVersion
ProductVersion
InternalName
Unemploy
OriginalFilename
Unemploy.exe
Antivirus Signature
Bkav W32.AIDetect.malware1
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Razy.964195
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Razy.964195
K7GW Trojan ( 00588e941 )
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZevbaF.34218.im0@ai7gJtgi
Cyren W32/VBKrypt.BBV.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Injector_AGen.AP
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:Trojan.Win32.Mucc
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Ad-Aware Gen:Variant.Razy.964195
Emsisoft Clean
Comodo Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.PWSZbot.ch
FireEye Generic.mg.ab5135e71815ad27
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
Jiangmin Clean
MaxSecure Trojan.Malware.300983.susgen
Avira Clean
MAX malware (ai score=85)
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Razy.DEB663
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
GData Gen:Variant.Razy.964195
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.FormBook.R445321
Acronis Clean
VBA32 BScope.Trojan.Mucc
TACHYON Clean
Malwarebytes Clean
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Trojan.Win32.Injector
eGambit Unsafe.AI_Score_100%
Fortinet W32/Injector.AG!tr
AVG FileRepMalware
Avast FileRepMalware
No IRMA results available.