Sample details: 5ba16117595b25b401b97e137a1e808c --

Hashes
MD5: 5ba16117595b25b401b97e137a1e808c
SHA1: b48ca3b4f9c13c8c9ef68362db899677a172468c
SHA256: 9d44f3ffa577f4c06b964e4f5ba13a721ce78391b09587a8f026ce23f029091a
SSDEEP: 12288:OyS8YOpStDrTCGIqqTcqBNpjtsHZ/JNRlf5pXgeuOaWt/YyU:5/ShrTCTqqTNJts5RNRVjgeuOaWt/Y
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Basic_v50v60 | YRP/Microsoft_Visual_Basic_v50 | YRP/Microsoft_Visual_Basic_v50_v60 | YRP/Microsoft_Visual_Basic_v50_additional | YRP/Microsoft_Visual_Basic_v50v60_additional | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/SEH__vba |
Source
http://capsltop3.pw/Sgytan.exe
Strings
		!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
Lusts0
Predatorial
Antisocial0
j&^>zP
,h"[-	_
@;]P<Gny
?LSW7u
<7HQGh
YuBgIAG
yvDHBg
h]P=zz
;Y{NZ&+]
4Ytg[P
fB7 .7
jZ/>J*+
x?UJ]4
JAgO-F
}e 1[x
cd/$2.
)Z6X9'
u'@lH2
K	p U.`Z{F
9-$=QSW
jae^vR"
\/Atrei
eWCGs/j
1ZJ&U2
4O:>+9
	MUI#\
?2z7bD>M&Jj
Oo#-{z
plX_n]
\*lMdSZ
xCrhYY
u^7m5R
;|Jv3X{
6Qp>NO
+2EX9n
E.0]k@t
lZREg/
q{9CGL0V
fUUv'j
Q#4v4+
ByTYMgd
BP!<Va+R
vTyY,%
8~`rJ\
xcrG3m
nly`Po#
h/W2<A
22 bb$
2bVG?	"
'B8BvI
N,a+r^
mKl?y2j
ep]^2no
gpW&@V
P>wY9T
nBwu!H`
llV/0'Q
gk!]dUQ!
ZJBivZ
)GTwf:2
1`0+j,Ew
s=Y=[;9
<vmK%/B\
	u0!CT
_`2'LG
jPkPn":
:0*VLB
n)C4]r
k]}O%?=
p@@p+@
2L/0HG
5O6o4'%
l_09SW
2kI=G$
9tj>V?
$gmroa
!G*[rp
~Td	+[
B)zZ Uo
.|2f-[
E0BjiR
?uNBnzD
z4m4_x
dd(oRX
p2nah{
|Oj 2T
)	g[|J
S'vNJ/
qe^K^\
}n2y@+
c.s}T3W
	#M[1@0
mx'}w3
R54*+!
oe%0lS
F,9QSR
E(z,Vd
dvL	.%
k#QEb^Yv
6wH+(@
}g`L!l
{||?H4
gFyAKi
JyZC`n
SQP"ASQ
c,wB}[F
Cnz70=%_B[
"f(PH%
q@6yUf
>v=|Ob
zO|PZ*6
5as	oN`
Ou~r[f:
NeIQ}hp
L27\KrU
%|&M;m
_JhZ4Y
J[`S43_
&))EEg
OdfMlp`|1L
>6uh\9
eI4A^=
a1b2uN_K
N~5#u3
(G{>Aw
[jS6H2
q(yD.w
=G?@%t
i]SkNuh?
z'f?SE
f&yh ;,
YZuP%*
vu	Ke^
/b|pt=
^<?5{P
)(FEu{o#N
UJ@rKL
?cS@tE
-`~\#9
8@\U:N
Ui(}Y]
]0#?h2
G$wb/!
JZ3prS}B V
C$!@0=
e@/X_s
~|PZ3	
4bxzuW
[L"\qf
CjA5DA
X,n($$
&yc:Dd#
'dJ!po
=;-x-Me
Qyeo|c5
t9Vi)h%
,PQy]MJ
pqOCp3
;1*V!,
jJM,sD
oOY2D 
Yh9}u7
dLU@RI
/UT^IF)
jeT]<9
%ZxK`0
UHaS(K
kqgo/s
N25Hb4l
 u7t#_JEJs
S#sewB
6O)gXP
(z	1Y)
u&h %tD
[e6<W&-
r|+3Qz
i7H,OX
A\3#jz
\Oei5Q
.Dc]]b
V-Y+ru
#Y&:5IhWC
XQ<sh#e
aU8J}^
&${O`2c
<8wl\ <
PG2Y5Mc
C*=!-t!/
&n4Gk&?
xc#9>2
^-^=!L
y #;e5e
0X@2c*
& [)A&
9R%Q.?
9-!'k#
b'=D\]
iF?1vH
Cs@4(j
En+L2Yp
{]la!k
c^{|kJ
!@,bG%
%M!&F-kH
"+%uC[
l1?DU1L^B
fR00IG
a3B*/#
 qv(QE
bX5l5(
<kOX=r
?mwxGPw
X3OKqc
"6WHL(
bZi	=E=
eY%,H_
~?$e[;
9[8zwF
=uZ#uP9
nq4D]}/
7KMJ[$
g0u}>q
^dwOxj
gfLU::+
T(."lZ
	*mweRa
X:|Jfj
.h;|ZU%}
uOx;Q"
fF@ESi
=How,!B
lqe$PDDn
VfdAS#B
3w5jmf
	{SKH.
0EaX4=
?4(sfC@x
VTcp<$U0~Hw]
NGU'1I
p=hjDQ5
qDSth^&
kaND@zM
	CDE*_
,*;oH^
wbm8kW.
p!7C.J
f?W-n`1
y#lj3y_<.
}CvSF.zp
^m9@_%
^i-Gmme
dGOTKLD
w!w>F(
xP\(y\t	
s_yRmp4
Zi/puu
F2z#4Qf
p;r3)9
sqA>-D
mz'5x%>C'mX9P
3=(hrA
6nXuf'h
"=F=lR
/qW9U-
4dA-P^
#z7s_W>9
x]7HT{&
2i/Asr
7#nXeT
aAg5/?iy]
%'>Ucu
rkp$j%r
da":^l
Z~'_EHf
t?CW0)
zab}%j
xX\(LL@
`rFrk%M\
c&0^Ot
B,?y&.
fTHx(-y
*0~Z8C
go!$\*&
't)/JG
L:OhP^
KAk jr;
Dlpo`' 
Btod,k
WzQ1ftt%_
(SE1[;
*3x1K]
t/&(pI
+/sal3<N
-q+;%,r
!.+; G
5*Uc3d^np
K]TQOO
;]NRl1b
RKv7MH\wS
+8^hui
%_xpZ} 
%UiU!.
'pUg^P
]"DS%M6
^9^A6(G
H(P;g3Fe3:U
'H#|g<
91No(Q
hE@POt
B-1Llm
Y4fVx@9,
hB	$hm
nT]_S+
knjT=g,^
'vLyUt
 'YM4x#
\roGU^
-/V<hi
0Hxzh5
sl|@<4
9G=^]d
[_{I1@q/
t#<W5qO
J^Y~*g
+"UN(B
`sWJ+UY
`PvJXI-%
2Od&>AX
l_]56a\&e
;,F/Q24
"5<L)+
am0/,m
k`5C9F
H3t5C=0
I~%L/|
~P{{=z
46TGqBi
HeC'>.
%&5	fH
J!@M]x
R+F-\b
\}p5Vt9!#
^g;JzH-)L
Eo8Dy0
BgbzNt	$-
1	m1hq9O
"RjMv-
:dzs{#	
VcLy|wb
%las:R
h	>%#)
d?Qr>'
qv^[hPu
Iz?7zkX
b~q-!xd
qeRskv
D'G"I~
n=cM!<DJ-P
P(%To8
RjAl__
2N :ua
\>"Twrx
)ny SL
uv&oWn
{X2O<27
1 x.ia
p,XPg?
:q	wX9u
'`:7MP
eLNNJ4
{LuP.aq'h
$HW37CJ
^=_)W$
2}jY9+
LC(C}}=D
i=qj2"
G){8QZs
<c)Qd[r
yMld1`
{%n5_>p
E}hb[|Y
OUVE6#	
5/&=gV
q{Whukq
{]'5u 
#1O>~y
bT&-Fj
#\~yU[
8>Q`T[
Wu-1VI+
YG`oqv
59'wW?
*u*kar
hj	i E
k\11T0
]8fKH$
f86ktd
\U<e@\
eo!;+On'
yv|eDq,
N{],) 
u"F]!|x
E,vt5>
KOEA)I+
aNOOQ6
,	XBL}
8(jClt
beOZ1aK
Of	/a4!y
NY|YUc;
wd7qKI {MH
{"ywGJ
Twu,<k
?X5B}V
2f6*d%
SpMS0D
~p;98B
h/_(q}
?@.`U*
:dlU~q
o\I^,1ph
m`whKL
@>KT&I[
{F`Y]"
&e4bz&
hvnvBE
:lA7d:
|V"I	t
Ru}<	&
vFVL\B
<I2`Cj
RE0g^-0Y\}
TEpmoP'~
'M;D[}.
&DM_Rg
h53h<(
,]lR$C;
#v<L!,a
hLF/&9F
}Z<?p1
EUW/,T
;m)MGV
Ho71brY
]sg}xLjK
E{l>_7
bN-7;}
6IeMtH
_N{YP|
/"To=b
aNR}Uh%
GN<\umaSp3
@f0_^3O
2~NJ71|
"l+C[ev
HMr;4n
B4)@s.*+f0
E%Fmfb
hIpw u
vKn/~u
 m!m)]h
wxwy:!
`<ls>]>
zGiB-v
xwa<	D
L8   w
Y"5X, H
4^-\`}R
*	kNlg0l
K.&4x>
FeAE!P
/4C'&W9
L6lLBr
5/\5xe
f}D,nq
qtxLR)
/mIPN 
.h=Gv+
/`L2b/
kz0-Lr
d[t-es;`6
9qNP6^
"A1#zpm~
T+H]k 
K&Cgb8i&
m+:o/B
_9u%F~
b6#9):85
1c,7Jt
o=^moj_
iN;WXS
 dL>f	
yW_2qM
7"]|9	
eg{K{L
BuT| Z
FS:MlY
/z.o,v
oA.?i9
3]}9:stW1
0ir e|z
oF0(bm
M:fd*P
PUqqF,
,q//ap
3zN9be
6c\F!v
[_M$'Re
RU.f"I
2?P"Kk
d3:tW}
KIwr]8
 Y4f$i
s;w]qPG
P hb4\f+
ypMUC#TW}g
V2w(J/
Bz@w9"
k]L	"Y
#[3+d{
"5[t9T
v4K/vv2
WWe7`u
um"Wk41
&Lj]2J
]qW`s6
H[&(Kg}Pm
4*	7*S
!v7!*c\
\lmsVg
zC2L8htX
L~&54@a
UlfO5!
WKN*ix
nY,-N7 
DOv'H~
kI:!VL=
6c~@I0
*V[	<a
;q@-Sz
.0#7!q
{7g_2y
QRdGg 
6OW$ax
.D5rS5
2Pt/[Y
M'A1|P
@2?Awf
7c	9OK
e]'*3% T
#	M*B*
W"yOBp
@F"`_9*z
sXH~aQ
A.3{7:
W{> 8q
Fd[BBda
b9GNC.
c_:.TOa
tPZ-SB
:7'_}q
W3I8Ru
,	q[a"
(>=z6-
pR)UaT
N5(k=F
}_yLQt
=/x$U`
UDKf\kq
U/D} '
}+y%9#
XFq84M
1=%drl4
x|)*a4Z 
"(Hx	~
Mf|[2|
?`'Z/%
t}S2%h
?Ywnl{
\Sa2apl
;n@Pgd
2	q>Vo
4zxAUWB
]@l}px
Cu+TFs
mjlZuP';
1]1-3\g0
	4U]!e
:uggL0
w(h<AL
I-hK}d(
S309$<
"uC^{o
u:`q4E
KK~a<Z
H>'7)DD
r$ t@M
{,{P42
,	3 @4
D4j5uO
3CY10Yzl
5x,,=R
:v6T"X
f&hj'	e
6f.h;a>
I*2`8HC
6Y|"3E
npw1#"
lO!	xi
y.'}?z
ogTh?=:Y~
!4k<=D
]LXe1d
@azA#^
UR{ouDE
t8L72M
*xTJER
&T2IOM
5)ed5z9
!NiJjo
0Shmbb
JQKI1}
_i	[%?
X~f{-=
F?%vJp
rDAs1*U%
<RhDrp
:sm'yK
Zh-pKj
7Jz	A'T
&/ELyi
3o:+a0
n`ac//8
nreMUN
xS 1^q|
[Mu$(u
vIguqo
]L	",:
lvdf|\
tR	#~2
0WA#@/
+NoC5Cc
&~wwqF
,Bht=E
I?t4/Z
E"Wv}Q
]?T|Of
(f.ww'
4|y57`
-:n_4X
b@g,/(
r%}/dV
`hwZpE
zpAlI\
+ccVY1F
jna}ap
?cK|	*
+lJBZ339
b3&'7v.
)&g4HL8
/BG$%?
o,Ydw~
hbr;be
H$Uc\'B
[0xi_k
g,dUUP
qj5[0H
Wx~[\9$
wn8L{v:
%@sdPK
Z; C%}
~rW(`H
HzGtoe
7`OcTK
Bk<iSs
>ql-BySeL
r@A?qT
*E"Tth
IPJ*{G
7dW`13){
R,\N.CD"x
B;`d/Z
B^lw-7$
kC<.WM
;6Pc&8
?p}qJh
vp.-!M
`Ms#GX'
s[ CW(<
UeyCa`}G
(!AL~-
/GbR-P/%
m!WB=!
RGdZ$C
Y(\'$9\N
@wx;mX
-,s	Oe
x78hyl
EZ[r<	pJ~d.	
m[y?kL
<w"N^I^
N_+G&I
S4L*MC
eQ|:/={A
0}V{Vx
0!Ljk@*
#"i>BlP
mowQ[U`'D
1E~7Xg
E]6|P	
pJp4)Ek
V)]PM@
f:QS	!
D{fmAx[
y)(^%C
}!7cCRVx
W#WyTe
m6&uw*L
R/}9[,
8m@N7(
Ui~BgtA4
#!A;52
	7}6lF
!:|[-M
_;+77V~
WZ&JY(
1{qA8p
A",F3Q[
N"_Xpy
wp5iU^{
%Wh$Xg-2
UZGnEN
@u[=w{Jd
-E92:[A
F<q^$ 
j"QQZN0
34|(}!;G
7wmIPwF
'CDdG4f
tbgR_l
ate#W8.
[dde2d5
hPf3{jO-
d#?^nf
SN?.u[
(?c"")!
Ie6b"D_Jp8
M?v]4:
o#X'+p
0ctXj%w
82?@rC
+++isg
g%BEz2
=8	5Yr:
F`r?94
gRIae}x
n?$H_d
RnA+QO
c|u]ME
mx<?nw
hkX(7=
Wdq.<[
|3,H;:
U<))|M}D
o_m;)P`x
y#X^B.x
~7Y6}Rl
LF0d3w
"Q$Rid
xk*4Rs
E@8!E=
Z]Y:v!{N1
[.0>j]
maMa5\
)NbDvuR
KNdJ"IvD
8n	#3lC
!W1 Q)q
{A{}?8
4IGmxZ
R\k*nx
iL $o1
s!zqhJ.
a"@l=73h
Z;g0)_uV
S3`9'2
!ud\dT
o]DkQw%
R+<9<R
C VcpV	?
~crgTv
J^#cci}
/kGt#C
\od	Z\
4FG }~#
"&$dT[
u57w(U
s> L^g
<*S]eky]
gq[P+VCJLd
h@jO8+j
&{xLyr
\7 .J3=C<
Q*ki+h
=L[1p\
#E%+(x
}cM<k`
zJnN?h
zVk	zq
;=3A*:
z`HEtB(
\jq av
)Roo]wm
<L|p"7]Ty
2n=;n=
}FzVVEj
O!qW3o
#,8UH[
e5 M[0
X P`=B
HC	VW'R
hHFC]MX
qTXl,t2
)69iS,\l1^
%\gjlS
$v=Kq=
.(s0fF
<q^#4p
lD0u?Q
py^e1[
P0*uuw
@;W;M,
wHoV"kDd2
_Mh |O
a3~K$$q
/`87'	>
nV^E3d_
z+E@Ty<
y%uulg
D+flv}
"ebRWe
g}k.yT
j!Q6w<p
]]Gwl2
.YuZ&D
hW)AN^e
*f4)eH
yQEINQ
&vX8e7
'{4X0)2
R;2]ydQ!
M9RB	J
b.HR'"
nUB3B{
g=oWJL
WwUHcj
H*Gm2M
ZGvKJ5
@SCD;Z
.O^M]s
pms%0d
":si]V
OoCqqnXaMm
*Y)#Jd
INl/Na
sNT'kV
(4|'fII
^qQChGqv
Ju?bFbU
%o(|J=
(x07#F
g7G"&&b
j!`QnF
crcqPi
:2Y%xp|
V[Pz*@w
Aoa:X]
_l	j2Y
=UxI[ERx=!
Zxs0tbH
^7!t{A37
!rshJl
l9Q;\J2j
o.rj_e
@|/0CB
]=JV_'
3/<Mo~
{D;+# #:
E!W*[}
'sp!&9S
uVmPl)
\b	)U0
v0~r74
Lgup}D
=}cxbs
<i!f4H
!w<XL2DE
 [X]	R
aco6!h
\7tS%j~
2^_?.0y
1t#'qijo
yZDyiH
vHM{,G
T6F3V"
L.pF; 
F[D*iyhY
/h3w!U	
KG6#]^v5g
_vMmfU
sl:3(v"
}3"Y2!
w3/Mf+e
&Djb__
;&R<'R
;hfww[_
k^Q!n2
YN*M]1c"
`SX`cb
g)foi-
)YXBx&
qXIS1Q
ygnGKD
O&Kcml
:/h2\]
^?dz@h
#.?]@+Q
az.H8poC
-q#ye:
5O@Hi;^
PVQ)2\
P?*DESN{
lTAw?T
%*	:H2Hj
zm+LGT
+(]o-2
my=w~l
9+2$Y/(
Di$JEP
n{I( ^
R_%{Dj
W:%F`@
El\Qi|
SfD:$;t
E(;$Ad
NWO+	ZG
rZlgBq
evGy>Snu
jAV7x!,
]^5vcT5
P)R,^t
rPd_{T
C\,[cC
8yhkv|
CvM0;`
 -	lrB)
zq!"qZ
M,-\JKLg
.@eNH+
Q">&tO
sQ)	%TZ+
CtyIha
zA,9M?Y
O2V0,e
N&"{GB
[	pwD,
O-e*C%
baMHvz
jo:0g^XD
:apLek
_QsnEw
z0[>Y&
"*p/c}
?xpgE.5[bVe
w7tz`a
q<v(@^
5nR2*\?3r
\SeJft
G^F+PV
@oAfF9
n)R%$/H
^!!;"=
VoaVc1"
z2;1[aK
^Gw3 auE
-51.Hy
OZq\6?
e=0t<u
NXB! `
Hf$917
<E>wt;
dQnV3 
 g$C/&'
*e*E~)
Yf3Kt-
UEJ^T|&
~t5@ k
"+w;qT
QR^q.H^
Y%063&
)Pf=2&
WO&r	!
cC}j<5E?k)M}
7:\p9n
B6 ga*
op[ywE
zyV~#8
#;?uPT
02}*W9
+0t<X-
cCeJ&(p
.v#q0p
mO<|Xe
xLO^Ldu
N"]Qb%4
do~2y3
En0vZ(
y'!4@8)Y2
3U2aCc)o
2nGQ$r
j5>IAd
7jnNp]
63RYHb
%)xGZGw
>CIh)q5
fZ0SFpb
Pvpb}u
Q6R9q0
rM/rGm
e4E+e:s|.p%A
&Ui@J(
Dxyi&o
X*3ReH
JA9$0W{
PjI))-~
wE22}7
6_$<li
$v7{{w
s]hUE\
0ExfWtd_iWQ
9Z @p3I
`z`j*4f
(QJ% t
kEakG^
dhK0yR
#ev|AC
v\LS)J
x0w\\s2n
oq?K#+
{9jp3p
g5Za(f
w|WtI,
P5_HtV7
LK$.MLnc
NA~f?cj
YYu=8[}S
V@:JJu
<gCCUa-
Ho%D5?
9e\[B'
N3S8u~
W_SNFj
ZZZZZZ
CreateFileMappingW
ooooooookernel32  
 MapViewOfFile
shell32
Shell_NotifyIconA
Pt`zGcuz
vv0=vv
 Gt@ZGt@^
Pnt*%v
V:A8>`
=UUUUU
uUUUUJ
pruttn
mttrqa
Vofode
efoooY
Yoooeb
V{{{wb
bo{{{Z
Z{{{w[
W|||wc
ew|||[
]|||w]
X|||wf
fw}|}b
^|||{b
X}}}xf
fx}}}^
_vy~zl
JHHH@@88141100--+***4%
7CC### #C
&<QIQIQU<
TGG;1	
NPKKOJ8A
PLKOK8:
POOPJ.9:STTR'
PTSPK.
.LTTR'
KSIKH.;
"!!$"!!
3;;==;=
F9AAA5
PMJJH@/++((
-~<71)
$,,,2+	;44"
'IJKK*@I84
47@JB8
JEC<%>
EEE478J
~D;.))
}}|||@@@??:
/$)-1&
kA95*'!(
oooooooooo
^MTI13+/
oooooA,;2o
 [4\_o
oooo^$
('ooE65
O??=ooo8
}#vnz$urh$url$usn$utn$vto$vup$wvm$
Omfavnelserne
Trosskiftet
Cantic4
Herskertitels4
Fuldautomatiks3
Popkomponisternes2
Downcrying0
Afpolitiser
Antndes
VB5!6&*
Mesofurcal1
Sprjtelakerernes
Lusts0
Lusts0
Predatorial
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
Fuldautomatiks3
Cantic4
Downcrying0
Popkomponisternes2
Omfavnelserne
HUAWEERI2.dll
Skatkisters
VBA6.DLL
__vbaFreeVar
__vbaVarMove
__vbaEnd
__vbaFreeObj
__vbaHresultCheckObj
__vbaNew2
MSVBVM60.DLL
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj
}#vnz$urh$url$usn$utn$vto$vup$wvm$
oooooooooo
^MTI13+/
oooooA,;2o
 [4\_o
oooo^$
('ooE65
O??=ooo8
/$)-1&
kA95*'!(
-~<71)
$,,,2+	;44"
'IJKK*@I84
47@JB8
JEC<%>
EEE478J
~D;.))
}}|||@@@??:
pruttn
mttrqa
Vofode
efoooY
Yoooeb
V{{{wb
bo{{{Z
Z{{{w[
W|||wc
ew|||[
]|||w]
X|||wf
fw}|}b
^|||{b
X}}}xf
fx}}}^
_vy~zl
JHHH@@88141100--+***4%
7CC### #C
&<QIQIQU<
TGG;1	
NPKKOJ8A
PLKOK8:
POOPJ.9:STTR'
PTSPK.
.LTTR'
KSIKH.;
"!!$"!!
3;;==;=
F9AAA5
PMJJH@/++((
=UUUUU
uUUUUJ