Static | ZeroBOX

PE Compile Time

2023-05-30 19:01:31

PE Imphash

4268417a626e2c0f1f976ac1fecf34a4

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00019fa8 0x0001a000 6.82117453973
.data 0x0001b000 0x00000c60 0x00001000 0.0
.rsrc 0x0001c000 0x0000088c 0x00001000 1.8798853054

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0001c34c 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001c34c 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001c34c 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0001c31c 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0001c150 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library MSVBVM60.DLL:
0x401000 _CIcos
0x401004 _adj_fptan
0x401008 __vbaAryMove
0x40100c __vbaFreeVar
0x401010 __vbaStrVarMove
0x401014 __vbaLenBstr
0x401018 __vbaEnd
0x40101c __vbaFreeVarList
0x401020 _adj_fdiv_m64
0x401024 __vbaFreeObjList
0x401028 None
0x40102c _adj_fprem1
0x401030 __vbaStrCat
0x401034 __vbaSetSystemError
0x40103c _adj_fdiv_m32
0x401040 None
0x401044 __vbaAryVar
0x401048 None
0x40104c __vbaAryDestruct
0x401050 __vbaObjSet
0x401054 __vbaOnError
0x401058 _adj_fdiv_m16i
0x40105c _adj_fdivr_m16i
0x401060 _CIsin
0x401064 None
0x401068 None
0x40106c __vbaChkstk
0x401070 __vbaFileClose
0x401074 EVENT_SINK_AddRef
0x40107c None
0x401080 __vbaGet3
0x401084 __vbaStrCmp
0x401088 __vbaPutOwner3
0x40108c __vbaAryConstruct2
0x401090 __vbaI2I4
0x401094 DllFunctionCall
0x401098 _adj_fpatan
0x40109c __vbaRedim
0x4010a0 EVENT_SINK_Release
0x4010a4 __vbaUI1I2
0x4010a8 _CIsqrt
0x4010b0 __vbaExceptHandler
0x4010b4 None
0x4010b8 __vbaStrToUnicode
0x4010bc _adj_fprem
0x4010c0 _adj_fdivr_m64
0x4010c4 None
0x4010c8 None
0x4010cc __vbaFPException
0x4010d0 None
0x4010d4 __vbaGetOwner3
0x4010d8 __vbaStrVarVal
0x4010dc __vbaVarCat
0x4010e0 None
0x4010e4 None
0x4010e8 None
0x4010ec _CIlog
0x4010f0 __vbaErrorOverflow
0x4010f4 __vbaFileOpen
0x4010f8 None
0x4010fc None
0x401100 __vbaNew2
0x401104 __vbaVar2Vec
0x401108 _adj_fdiv_m32i
0x40110c _adj_fdivr_m32i
0x401110 __vbaStrCopy
0x401114 None
0x401118 __vbaFreeStrList
0x40111c _adj_fdivr_m32
0x401120 _adj_fdiv_r
0x401124 None
0x401128 None
0x40112c None
0x401130 __vbaI4Var
0x401134 __vbaAryLock
0x401138 __vbaStrToAnsi
0x40113c __vbaVarDup
0x401140 __vbaVarCopy
0x401144 None
0x401148 _CIatan
0x40114c __vbaUI1Str
0x401150 __vbaAryCopy
0x401154 __vbaStrMove
0x401158 None
0x40115c _allmul
0x401160 _CItan
0x401164 __vbaAryUnlock
0x401168 _CIexp
0x40116c __vbaFreeStr
0x401170 __vbaFreeObj

!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
Project1
MDIForm1
Created with GIMP
ICC_PROFILE
mntrRGB XYZ
.acspMSFT
&>M>=;
Hd"(j/V
BojXtKN
s#Zt*~
!0"134#%2&
3fI#tN
uDW:+]
Ampoz1
^K^Gx
lsc~9y5
Vcl`\B
2`fq%
"05Saq
6qT|%
NvqXm_v
<@S$-@
$nWq0J,
U8cIR<
Z$]8e:)f0
3nW+Z/k
7io(*Sx
[Kb`=kP
;e{9%3
Ks)a,>
024Qp
..l_Um
{9;*An
$F7)bt/1
UK"tYf
+!fg-
dzh.8+U
76T;,mE
dc`z6Y
kj>Z-q
;tuc[LpT
^s;K\Zq
-S5xl[
#4BRpr
]rXxy`
U8vL<+l
6d.lEr
*L;g\x
G}`.j>
{;4<~V
)>Dg]*4r
4[W:`*HO
xy\<o}
SHe{E=
Qkc},>
G"_kQNm
/X*g'l}
mD(6mz
5aDeE@
z?<]Lc
9E0a.e
i$j?<~
'CoJh8dfw~?
@-^I W
I1,BK_
!1AQaq
y0=plC
+D,Dw2Dn
f5*lQo&
7c5%5F
S4(fmU4*H
1tFj8v
tM&~R/8G
B<<;DT)
Ktbve*a
!1AQaq
:9;3X4
4d~</E
^Bl%4N
j\=%9&
U0T`,
FFFFFFFFF}
^^^^^_
sF^^^^^s
$ =aH>)
Fa9/S
zG4ddzFG
)/J|y
H|.CZqB
LXZ&|;
'dABrl
nrDZ:M
PC%8Rf-L3
v"L`qT
rQ2l>bq
"qHZpl
K:zgn}
ed:/Lg
EUm^}\
DeR%Vv
FnvVN\
a!2!jLr
MDIForm1
Project1
Project1
Module1
Module2
Module3
Class1
Project1
kernel32
C:\Windows\SysWow64\msvbvm60.dll\3
advapi32.dll
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptEncrypt
CryptDestroyKey
CryptReleaseContext
CryptDecrypt
EncryptByte
EncryptString
DecryptByte
DecryptString
EncryptFile
DecryptFile
user32
CallWindowProcA
VBA6.DLL
__vbaUI1I2
__vbaAryConstruct2
__vbaVarCopy
__vbaErrorOverflow
__vbaLenBstr
__vbaI4Var
__vbaFreeObjList
__vbaStrCat
__vbaFreeObj
__vbaStrCmp
__vbaFileClose
__vbaGet3
__vbaStrVarMove
__vbaI2I4
__vbaFileOpen
__vbaAryDestruct
__vbaFreeStrList
__vbaFreeVar
__vbaGenerateBoundsError
__vbaVar2Vec
__vbaAryMove
__vbaFreeStr
__vbaAryUnlock
__vbaHresultCheckObj
__vbaAryLock
__vbaStrCopy
__vbaNew2
__vbaStrMove
__vbaFreeVarList
__vbaVarDup
__vbaAryVar
__vbaAryCopy
__vbaOnError
: : : ~
: : "
: : "
: : "
: : "
: "!: : "
: : "
: : "
: : "
" : : "
: : "
: : "
: : "
: : "
" : : "
: : "
: : "
: : "
"!: : "
" : : "
: : "
: : "
: : "
: : "
: : "
" "!"
"!: " ~
"!"!"
" : "
: "!: S
"!: : ~
" "!"!
" "!"
" "!"
"!: : ~
" "!" S
: : " "
" : : "
" : : ~
__vbaSetSystemError
__vbaStrVarVal
__vbaVarCat
__vbaStrToAnsi
__vbaObjSet
__vbaUI1Str
MDIForm
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
__vbaEnd
__vbaStrToUnicode
__vbaPutOwner3
__vbaGetOwner3
__vbaRedim
ByteArray
Password
SourceFile
DestFile
New_Value
j(h\MA
j h\MA
j4h\MA
j(h\MA
j4h\MA
j$h\MA
MSVBVM60.DLL
_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaGet3
__vbaStrCmp
__vbaPutOwner3
__vbaAryConstruct2
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaGetOwner3
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
__vbaI4Var
__vbaAryLock
__vbaStrToAnsi
__vbaVarDup
__vbaVarCopy
_CIatan
__vbaUI1Str
__vbaAryCopy
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
LanbgigriH,^
NNyQ(<
O191BHQ
V k)Qn~e&
OrR1XgH-
fg_=}M2
44Hb-b
ezDr'rz
3(N7mQYM]
4=L(z8
*E@}]
%]@"U
/[\Ij?
H*K&}z
1wtN0
gX\JEP5}
q-D9br
-+,wG-
j.\/^%1
?he8R
fN%mD2
=76%OX
Vdmbug
p' IBZ
l0gQ46
(Rm@}o
P/dnLm
*R}/yR
vz6&-g
+S7I}q
My{fXV%o
=<qAXM
i?si>U
!J"Ej-;
`@K=aHS
:Lf-2&
7HFQor
Gl-5-n
U=OhHxM=
]mleq.
'm<Ic2C
<<Fc:)
p.cO7_U_
>j'&nc
'bM4\CR
(U/7w.#
m;:@%WGx
CpvKbN
0#FGR{
hF}ik
h~5?g5
dWY8<0Ci
w]uNo,
ICFoh-)
8O%OV
y94<tz
,l=Q+H
qQ33ag1Gfg.-?hS
_4F28ogq
+T FW/
MDAR6W+}j
>7(E)1@
>P/y8$
^p*Y8=
*"dt7ZKD
s<]i~vo
k&%bj~
jvob)}>
{FowOZk'
BmY&h-
5Af|t:
hfX+4~
x#t%/r)
}s),VU
w /wed
@e6MEPc
'?j" q
)Xu5q#s?
$j9%/U)
4Z#-uS
d3\pRK.+
N(J:rU
e`dFh
5qF^E[0
e8 >O4
Vi7Ct,
Z?V50>
e/m+C!p
/n(zI=
~8Sjhr#
X=09fdh
j>45U>
SZse#
"=Zq2vS
4`fGDy_
Vuw@@EL
6-@<{g
np~0()?0
<2fb'B
7*7fI}
J#gj =1~
KZV'?U
iO#@>(
EW(>jT
(Q@HY$XB
DHf:e;
Wn7WdB
[g,A ;
YhD<86
]lydo'
|7d#k_
`c%&9/<w
~}H2\q
T[79~Jv
TRD5'.
)Q&xcj\Q
h8!$*_
#qX}I>
v/z4^
i223Y'
LC3W`z
pUnUqY
bCRF_E
d1~wu-V^
E<<OM$
e!]ZKa
1?k>f8
mQA?oFa
2:?44G
44hgJ!:*W
`]Fwj0
|lYMil
zyBJ+O/Fx
}2D(4wif
y{WXxN
h'*/,^2
.PWP?at
$|`m)p
9FO'FZm
#T]F(N
\w?j88
.$A*WG
H'lJM7
t+N[Zu
%K=D%#E
wK"VX:
M~IQI~
"M.;oRzJ
.+Shudm:
'TKi>b
71BQ3n
KCe$Ww
;G{gA]}
+@|>k/
~?10Bk
I)}hOn
c5>:8j
qCMnK@
lv <o^
)7*9zS
Z)4}@NB
7y8"a+A>
,_Z{bj
N4o2s5
\RzsM9+w
*?uR:sp
[EHPj\H
'pfVcOlu
x*/b]Lp
E/%Od+
SD \/J9
(h@E}kQ
]PJQj{
8s9_DZ
/4nuiln
7r#q@TR
-k(p,Ba
iBmF*?q`$
$bpJ~Zy
/6g5|(H
D2%>9h
OG{M0/Pq
*Ws-NU
9h,$eh
*s,.[S
QTlAQsa
O:#G}f
msZ^_Iqo
uY1KdL
aI-}t[
"jq?]w
kblli)
Q$}EhM
-g?;4a&\
?DO9!x
]jj$xC
(YL.Ex
['lD5 >N
h$wFVDx
, ]%FvdU
n|3\ R
HO4t!!
1r3g/<d
'R^'5z
l&xG@tSe
ptZOxGql
FvQSFmY
N#d~11
OM, }XP
4yMt;V
M{Z1~
~[osT
B!JbNV
K 1+L{
{)E&O\
}]^^5=
=_VxS
zw`^VYkX
if7k/5R
5Dt5b6
jz*J^UX
P*V!I,
Eke'A7
bAA:"I
fp0jez@
`J5SZB
6(V'((
H{|"XP1
_ZC O
2ud*2>v"L
>oBOjC/I
oM TW}JNn]
7m6k&
#a]YBo
{t,wKI
5`\F9a=
jTzpv4
Q8=$NH
}-^DQ\
d<|=|e
g_?;Dm
=H9DaH?
-Sv=[_j9
LU/kj3T
}6#I2
e**f&Y
^J"'-G
^Yh$m)
n5K8I(
w)A$z[
kl7uYg
w_`7UX
3482^Q
M7vkGL,v1;
7J(XD$
Tn^5Uk
D(F~Wa;)
cSX^fz3
%#J(AA
XwdB\
G^S?7_"
^pjt[}
A$J}^t
;I+i`Z
bMwyyw
,?PM&F PF
#WE>mki
G5]mP(
Re7\Q?
@g6fbs
bG?yoAq
mb~$nH.
1esg!R
II3-eJ
XR8#0S
5#,zn@Ue
y$tAU#
v`.7UG
&m$Fay
|I62n?
;<%!k.Ub
m2HW''
oC>IA/
\mSJNT
0?\.2Ef
RRVFA_
l+#c[_
a:9NTc
:=!L>d
SonTX
.wZ:&|
P]o2|"$4X
`wvE8h`ja
Gg<AWr
b@yCn,
Ry2SQK
B*`("%
\N2%DIUu
4M,:sw
9Qt,&Z"
9NKMJ[z
Ca,#T"
;*j^^K
L2<r|g
x7qT#]
>5eb6iS`C?P1
M _[qa&:r
NCx^bd
GR2ZJ(
maEno
3zu7W`%
c0G~e^*
F7:[Rs
~H]IV!
N\:js%
1a,![:
GH.RyL
pGHKWx
QJ}8bbA
m2i~L9_
Nn+27|
X6x+dB
Xl"(Sf
yp7zf>
>$8TZZ
kI{*j4
sO@[(qW
u[uS{]<
5>oaXvi5
^G~7E-=i
Q! E:s+9
mfNf4U
<7 {([
3 ;i0-
I!hsvA
vqhwUn)K
uDN~"|W
2csjy8
i51Xkd
*#3R@}
kK^QpS|
2`w?F8v
,aE|7E
Dn<;T[
v|mVWB6
dcv<VH
r&}rG
xRE]7"CC
q*QmC(
??S%M#
mJS|@q
?rT^/93w
JU>/wk
}[+R-w
vUU0:B
a2_\d[s
LYz\6q@k
)k{qjR
I dR'YM
F(=ai@
22<=9T
\^"Y5
x' j/V
U#F9vv?
}zw@4{
c'?Lrm
T5Cgu{q
A).CN|g
@0FkM0
RgtOVi
KZPGW8-
-+cg,yZf4{
as\5]
}jn^:
,{CoT
`Oc<v>
dccg[I
PViTWr
CvlggZ
j6nJJB
A9bjC
2dWC%b`
c'ifeN
8N__M
n]i,IzU
1.!v.AR?.
TI9sFP
PdR<W
X+)j[w
{bOlrk
VR'ttM
OFkl%-~k
1phYzm
?+H`PR
~r6R2c
FgN{XQ
2]F83~zx_F
q1mCko$I
:+TMFA\pb
,Q+WiI
9n$YaU
"~O17?
y)X[;af&
DdZ=.>{
*gFC|!
J%XElA/
'oNK?JA
?rhy#K
(NpKMfEX&
u=PE}Hu
2{#h=J.
{]8)@]M
3S3=S/
:n(]YH
FwUV-#
"0@_kj
''.h?Y
YniP#'@
qMV2i`
^!T+9b
GUdfq%
pqXd;1
lBp8f}
AMdB,(&
}{sWCP
t"Zy:[!
0):0=X
v%1Fe3
;&K6>
feSNJ)
;-,:7S
!#P9/8
mD(a,C
_@xvbB
2=QUZO
J}dRUv
L/Ap9;
yk;3j}
3?('*=
P?:fDS;#`
}{$=YD?&
R%1!eI
E@2{Q:Kr'[I
r|;Ep%G
oSeKMm
_odF8
lA/r.Fc
~#I:64
px?f\
{*DSj3
A2%-hJ
tg/9#7N|F
'JSr7Z
t g*L<
a<lo^X[
[rvmJP
qKmo-j
6xiBea
IDQ?[
/6<J],
h/#A9(w
3'#)N}
~/5;d
>c Vn^&
J/",vs
VJ=#h.A
puwX e
ADigB6D6
O)!23}
NK}8d,
ikr!r/
OJ$,Hs
/FU`/X
(jd)Kg
<]j<mMX
-AHdN!q
4]~%r\
)!.g'`"
CcIQ'%
n(*uY`N
o?T>0o
r.5gC}
!HnxJm
;NmI4Q
>ws-sR
[`v!WsGY
aq'G(?
+5a9{5}c
wak!(`!
b5=q$f
TD ]t?
1>F\Oj_
~uOhP}
0p6w24os&<Z
P`#WKc
|oJP %
vq/;SVQ
x>$c:
s-&?$^
%G5YjcS!#
9\N8Ek
rX?E}f
-joA,-P[
#(zRMg#
<=?`MYti
q;{~1{
nVA#7F
k }rOy5UH
9<N.bp
.YLDN
7fkZ4s
lNGK~X
^jy'ky
[&` dk
a/wFB (
<j}/Q3
zQL`kk
UifKid}0*
u~pu>
[=<8/O-
;'u~
~wX^X]
q$nJ(=
6H_D+?u
R"*Q.O
^>avwf
bE7DwL
+<h/;
s/r"E,%
7a>9t'q
p"BWpa}
TYF[t)
Rwa>>V0'
`6]3-,kL
I1GlFg
KA<F#oA
3O=4]k
9yMOJo
R!Y]@i
L:o$D7
o?YFf
jw^"n
Z@eTOl
4/z/CyH
2n&_]G
SV!aFz
@@'1=#
"]iqT$
dOD$Rj
LW*es5
x3;U3xnA
_5_k@ZV
bCA6TI
4W))f4
":Etro
9Ap=<lI
36 571
!p[3Q)
IryB=o
#kJ#6g"
ZS;3?`
(<kP/n;A1%sG
L#"PkW~%
p,cPi5v
rmlm=z
'C?h'v
u IY<
l2qol5
%}o}!1
ljG#)C
woQNe2v
y6po|,FX
wqZ#70
2$_;V)
eBO5Yq
}%70-a
Y, sY
5*_tLw
pbqR:%
6_UC)v
lSS"("(5
!r0<[4k
2HDT*DwFl
q\UU:k
zob^M)
>Y:J?|
^l"b"H
bxq9z]l
ta$aBt
t"_8BN
%foDW~
t]h/9c
dw5-1; @
nZ ;a]
^;V?h
KoAGkkl
,TU0*,wVaM
R^T\ 0
]7YMPz
9ID I$3
-P ;s)
'0BHMo
*n`uVM
tgFd'?
M]Y|'8u
G@@qsI]
abxVE*
j5>v:B
a.QdC+7P
WSwBkA
Rea:tp
kG6|8]
[{&GNCq/~Z
"XB+@?'
PQQpUx
JaxR{5
a^\P0}+
E$l@v d
X~6Wu-
u],YwP
1rpg`\t3
rI]d<"
#s<(=p
WbYCI%
'w]XH>
9rFha&
+$*^F_
3CE,mw
-VA) L
fOz<Bncu
,3A[Eq
u2s%:b
NxFk`A
snfuz 8
[PigdQ
~{DrF'
Huh2y:
A>mnuw
nHA(d(
G:<*Qjh
6GGq6)
@aR&+d
`t7xF
&S&~F$
A8u5t4
*3fA&
h=gW*xKsf
{Z464k
.P#ng,
PBg<&
sWNEyH
64H-cn
u+r|OdnN
B`Vkx
WjMV=p
LOba?v,
!tqr!%
ugH,|xF
68_nCs
6|3j*H
En433D
VM'YqS
0*uNU?
T)C;M[?
KQt:7WS
Zs[+&Vy
>?q -C
?o/fr
`%bR|S
kCuY7Ao
rkMS>V
XsD=x
)O7IxOV
\0aKZ(
Ta _#T
(4A"#F
W"jxO2"z+
"+MnW-
D+G1e<
Zb'~Aw
`/eV7B
,TjnB|
l^I80et1
?D)f#
pjn@ t
6:|4=F
d|fI2*l
W*8Z.t
)z6?.:
;)o{|l
~_yJt%
[*WT5Tz
.wJ@knF
YA2/|8y
ftL xh
bc={DS
v6ZUq,
wZZ!Sf
<%b1.8=
e:P,#-
EnPi|@
]Hf!L6
)xNs-R
v)G4Gm1
n+p\Hv
mK!&}S
zkg`J=
`DTziv
'HOMc
>.iY!
d_)~})
$-C*PF
\jpRXu
=;:9b%i
|#?~ku
p|ZY6s
]f+;_-
JF2i@1
=o1>pF
2Er0\|
a)=(`mr
y3in,B{`
A'Nf",
P&,\U>8%f
$/u&HI
K0^,JK!9
s(wv""
q@Sh}k
z(YgPt
/`TRf<
Uc(t{1
a|z`1_
GdwhO4
Hm)cJ_L
W/AKK_n
R29Nc"
PD4rFg
\H*zL3
X:g>M_
*G=i`n
'0b9rQb
y7Hm1L
$I3V$h
1Q{zr
1GIbOue
tuRQ*V
O+[i}q#
s~g=e~
g-pw/[
^;(;P
zVyfpD
.*f;*B
NQ43~],
A}Jr7A*
&#WZar@j4
K*5}| s
.rt$CNOp@
>HF<lV
lj$,fW
!g+)}S-T
}1GLLDr
\X{&\v
$%B5u;
A}1uefA
O%^w4[
wGPzhs
|`=Ed?4
D!HcM5o
D2Yr~AZZl
njvu u
1JeDqt
U[J]P9
wP`Kxz
Iy4<laMjlc
LanbgigriLanbgigriFileNameLanbgigriRegKey
GIMP built-in sRG
Public Domain
A*\AC:\Users\ivan_\Desktop\new\Project1.vbp
Lanbgigri
MikeTyson
Microsoft Base Cryptographic Provider v1.0
Metallica
mgznxelcl
WinDir
\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
-arguments
\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
Error in Skipjack EncryptFile procedure (Source file does not exist).
Error during CryptAcquireContext for a new key container.
A container with this name probably already exists.
Could not create a Hash Object (CryptCreateHash API)
Could not calculate a Hash Value (CryptHashData API)
Could not create a session key (CryptDeriveKey API)
Error during CryptEncrypt.
Error during CryptDecrypt.
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
040904B0
ProductName
Project1
FileVersion
ProductVersion
InternalName
OriginalFilename
rat.exe
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Generic.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Suspicious.Win32.Save.vb
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
Baidu Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
tehtris Generic.Malware
ESET-NOD32 a variant of Win32/Injector.CLZC
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Trojan:Win32/Injector.63267fca
NANO-Antivirus Clean
ViRobot Clean
TACHYON Clean
Sophos Mal/VB-FD
F-Secure Trojan.TR/Dropper.Gen
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Trojan.hc
Trapmine malicious.high.ml.score
FireEye Generic.mg.46003a9179272350
Emsisoft Clean
Ikarus Trojan.Win32.Injector
GData Win32.Trojan.Agent.45GXW9
Jiangmin Clean
Webroot W32.Trojan.Gen
Google Detected
Avira TR/Dropper.Gen
Antiy-AVL Clean
Gridinsoft Trojan.Win32.Remcos.bot
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Trojan:Win32/Casdet!rfn
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis suspicious
McAfee Artemis!46003A917927
MAX Clean
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R014H0CFD23
Rising Trojan.Injector!8.C4 (CLOUD)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet W32/Injector.DBRX!tr
BitDefenderTheta AI:Packer.3650088121
AVG Win32:RATX-gen [Trj]
Cybereason malicious.42d451
Avast Win32:RATX-gen [Trj]
No IRMA results available.