Sample details: 64c37bf76db1a5c1c14380ef64fe7bba --

Hashes
MD5: 64c37bf76db1a5c1c14380ef64fe7bba
SHA1: bf70d730fa1d0543dcd49cfd8e86b76b23493a74
SHA256: 82db95342a2ba03ec52a13e4795c15a35b322d99042aaa2715791c083da68b20
SSDEEP: 6144:KDDx1L5uqxpR4onC0ri3mtn5T6wsrlkrkIng/73LAmdlJwCrfaiqUoAq:KXx1LMqxpLz2mtg7rlkrkcGU4Vrfe2q
Details
File Type: PE32
Added: 2019-07-11 19:59:50
Yara Hits
YRP/Microsoft_Visual_Basic_v50v60 | YRP/Microsoft_Visual_Basic_v50 | YRP/Microsoft_Visual_Basic_v50_v60 | YRP/Microsoft_Visual_Basic_v50_additional | YRP/Microsoft_Visual_Basic_v50v60_additional | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/SEH__vba | YRP/android_meterpreter |
Strings
		!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
Project168
THERMOGEN
QUADRIGATE8
QUADRIGATE8
genera
Fascistic
froggish
misdirect
VB5!6&*
Tearsalt6
Tinmen7
Project168
Project168
THERMOGEN
sirenia
BRIGALOW
SQUAMOTEMPORAL7
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
froggish
genera
THERMOGEN0
THERMOGEN1
THERMOGEN2
THERMOGEN3
THERMOGEN5
THERMOGEN7
THERMOGEN8
THERMOGEN9
THERMOGEN10
Subtilising3
Lightings5
PROTOPHYLL
Eastandover
atria8
carleen
kitsch7
Filemon
CEPHALIC
MOLLUSC
LUCKLESSLY8
patriotically5
mooreton
OVERHEAVE1
EUTAXITIC10
Inveracities4
HANDLE
VAGARISH5
Fried6
Fieryvisaged5
Softcoal
PROFITERS9
rascallion8
PANSYYELLOW
Peloric6
Depredation4
pneumococcous10
harristown
prelect0
smoochy
Unautoritied
limerick8
Aphotic1
VBA6.DLL
BRIGALOW
Adhok1
Adhok1
SQUAMOTEMPORAL7
Alchymies
Alchymies
sirenia
Twohorned
S+Y4CP
[FNW/C
+WZPj`
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
BhJu x0<`
mT]ovX
DRDf	X
JZ%ZHEG
kQRj/z
p:`s&Tbk9a
isP	pD0
(lh9:x
DH1qO'p
pVZ8jJ
[1\Q+^@
VOF2T.
mcgotK
F/-mS+
c^q`m&
,Wy&{XD
'kJ`y_
]hin`3
Yhiz`3
$g)n&-
3[{~".
%s`lL[
:^j@~n
V"M8xf
TQ3'WZ
XT}~q9
JXPK@L1
0JGX;K
6-UZR=
1WYIbI
oy*6uW3
WJRj~=
"%g/Or
%+&HZ-q
?rI}IV
cR(g)f
G*F*T[
 "G|f7
0GL8el)
{8xx]Q
9kjgVE
3Bc/VZR9v
4a2}qN
w9k8R>
XEOZ+_A
8qveXd
C#XJ`aT"
wTO|#q
@Q>6Nr
I	[VT\
LCS[RjpsdO
c+{ppH
$%8+dU
kb3w,X
xd:mH|
@hXy&N
!*!.;A
Y_ixkb3wg
p$WZ&g
%1~".1
hReW (
t)MGOK
zej^b9
vGhp xt
7*WZR4
-%s|\.
\}+'WZR
!<aoNTbi
A/Qn_{
5?,a~)D
h;;u0#
AX`Dr|A,
%rv	HD
%sY0)e
4WD0@M7
@Tbi9r,q
A.So	{
'@w/"X
6P\z0.
tvS}.K
 ,j:UO3
(l18:x
YPpq/I
HSqGKMx
\l5B`rf7
 <px=^
#LPz\,
KqI}MW
'=Z8jp
,owINaf
vQG+HeQ}
$3>/e_
XSw-mG
r_'TBT
fKGOC+
vv"JEp.
6T49sz:r
O2]Ua1
ckJ<!B|
kaG_$nX
KrObgp
RK'LDf
oRr^w,
0tB^b9
#WY(lFX
c^LuoNz5
<k&1.R
uhw$IVI{
^hX@qN
dkb3qg;<
u@kiS^
aY`-@X
$BYr(|<l
bl<8:x
o^T9d(
<WXibAi>
v G+9eQ
-*6}1<O
RXj wdOz
-hJQ$x
Yr'1 |F
v#9"xt
@iFO7/H9q
~i\p4s
Y]d[0FC
GurNUc
] pdo]
Z)\B%Lt
rhJQ-r
lR#~gW
(tVR8h
GfLuon|T
*_Asy?
ZScakg)f
@ReW  
b$5UsI
1sj utK|
Bu>FKC
{HG'FD
}=|8jqs
BT4i\N
BWYIbY
lZ0NM:<
EPT\0h
XtwH&w
CqJHM?
[:?\JJ
,g)n&9X
Yb99j.r
j-Vifj
 )h.NA
Yadkb3
T>o1>>
q	:.	sO
| <yFX
;[} F$2
|!<pjl
RG 9dG
WZRjx=I?
+1'`~'
 R~}v6J
1gPyT:Y
g+WZR2
w$~d?n
mc7Lm=-F
hP!LDu
b##i_m
fDPm(`6
x^fQL'
yJLXp0
GL|FfY
&ee)ZCJ2
N0~:z$]
/Ox]*}
+	8}~;
d_?o3<
,kqcN[k
_X9gr 
<rkoT#
TZCV7_
-P6_HQ
V]0vy~
]~f4n_
3y_E?B#.k
2-ug>;d
+GC[/(
:8G`O9!'
=[>hlxa
U 	EGy
K,hO7NS
C*.V7|
]N&<~ 
&47Ed_;
5V`Mvo
k]lH].
KA!#DvK
E]2nqKc;*
TkZh!'
%dQd*a
{T6+=]
QTmbpj
1ia#kk
Ou,"@R
HW,l`>N
E	=UI,
WCbcW	f
PNGsY!
a6+!g2/
dzJd-4z
gLC\(^
^Q5)|p
^l:*:%
/+Q^l4
V4.%W&
P[l".p
3b+n^Z
{]@z0Zi
2XPb(]
bHzD1Hcx
7Q{[ U
Qu(!fq
Zc+Rl-
VgCWyj
jUj	^~
9RE*kNF
;fONz!
ba6(N0l(
kOvmRa
/8igL4
x5J_cZ
nK\??O
90uA)F
:	rE2T
7,!5txLF
7CRH4`
Hu8Yhc
&X`adS
]-1?Ge!P
vozask
Mc]7.?
eKN{VM
Fi|s>a>
qjg]+;
x@dT%P
)Zg78/
Z\UdWi
ufvt3-
	FQtGW1
W<!k4G~
NsiHRN
NcthC5A
v}"{=Vx
F(|Rv[B
Q&S1[$
hZr)ma
-d9697
]n.$T)
)lJ\m0
F.x%st
/l&vfx
<"s1eQ
-@nGP}
RJl.ikm
Xg=X_@G
y'!TiG
+[abIR
<Mvyy)RI
,&?hGR
fgNug]
yf	kjoO|
yq7z{6
uaTnka:
7FDoC5T
V'b_yK-
gP5:fx
!A[3Z@
m[GeX#
uk&@n2U
b4NK,k
Z:DT>S
=UQ}hl
x~	57%
<WQlN"
SWu"Qh
f=:!<M
+WZRj 
+WZRj 
+WZRj 
+WZRj 
+WZRj 
	!7Og~
Y4CPY4CPmy
+WZRj 
+WZRj 
hAAAAf
<cX8f6\
.\X2&]
*XZ:"]
.SS..\
<cX8D;\
<cX8q;\
.\RO/(
.\RO/)
<SPXO+
<SPPp6Q
<qtX(>T
.\Z8&T
<nPZ8&T
q*Wk>jW
XT~ZW[
6UY.W[HX
.);<^L
RO/SU]
>aPRvj
<cT8-$\
RM.)>>
>kLR_,
.\Pp.]
<SPPp.^
.\9h,\
<k`RO.(&<cD8
]\Rv,:
<<SPXI
.\Rv*<8[)\
<s@XO+\
*>*VRv/)
qjO.tH
||	@@@
'&&'&&'
	''''''''
'&&'&&'&&
'&&'&&'&&
'&&'&&&
'''''''''''''''''''''
'&&'&&'&&'&&'&'&&'&&&
'&&'&&'&&'&&'''	'''&&
'&&'&'&&&
'&'&&'&
'&&'&'&&&
'&&'&'&&&'
'''''''
''''''''
'&&'&&
&&'&&'&
'&&'&&
&&'&&'&
''''''
#$##" 
'&&'&%
#$##$!
'&&'&&&
'''''''
$$$$$$$$$$$$$
'''''''
'&&'&&'
'&&'&&&
'&&'&&'
'&&'&&&
'''''''
'''''''
$$$$$$$$$$$$
#$##$##$
#$##$##$
'''''''
'&'&&&'&&
'&'&&'&&'&&&
'&'&&&'&&
'&'&&'&&'&&&
''''''''''''
''''&''''''''''
'&'&&&'&&'&&'&&'&&'&&
'&&'&&'&&&
'&'&&&'&&
'&&'&&'&&
%'&&'&%
'&'	'''&&
'''''''''
'&&'&&'&&
'&&'&&'&&
'''''''&&
'&&'&&'
%&'&&	
PPP++++++++++++++++++++++++++++++PPP
PPP&&&
&&&PPP
!!!''''''''''''!!!
PPP&&&
PPP++++++++++++++++++PPP
!!!HHH
HHH!!!
&&&PPP
PPP&&&
&&&PPP
HHH!!!
!!!''''''''''''!!!
&&&&&&
&&&PPP
!!!HHH
HHH!!!
PPP++++++++++++++++++PPP
HHH''''''''''''HHH
PPP&&&
&&&++++++&&&
!!!''''''''''''!!!
PPP&&&
&&&PPP
!!!HHH
HHH''''''!!!
HHH''''''''''''''''''''''''''''''''''''HHH
HHH!!!
&&&PPP
HHH!!!
!!!''''''!!!
!!!!!!
!!!''''''HHH
'''!!!
&&&PPP
HHHHHH
HHH!!!
HHH''''''!!!
!!!HHH
HHH!!!
!!!HHH
PPP&&&
&&&PPP
!!!HHH
HHH!!!
PPP&&&
!!!HHH
HHH!!!
!!!HHH
HHH''''''!!!
&&&PPP
HHH''''''''''''!!!
PPP++++++++++++&&&
&&&PPP
!!!''''''''''''HHH
HHH!!!
+++PPP&&&
++++++
!!!HHH
++++++
++++++
++++++
++++++
HHH!!!
!!!HHH
&&&PPP+++
!!!HHH
HHH!!!
PPP&&&
9&&PPP
!!!''''''HHH
HHH''''''''''''''''''!!!
PPP++++++&&&
BBB9!!
!!!HHH
HHH!!!
&&&PPP
!!!''''''''''''BBB
PPP++++++++++++&&&
!!!HHH
HHH!!!
!!!HHH
HHH!!!
&&&!!!
&&&PPP
FFFHHH
HHH''''''!!!
!!!''''''HHH
HHH!!!
PPPFFF
&&&'''
HHH''''''!!!
!!!''''''HHH
PPP&&&
HHH''''''''''''''''''HHH
HHHHHH
'''!!!
HHH''''''HHH
!!!''''''HHH
HHH!!!
&&&PPP
!!!HHH
HHH!!!
!!!''''''''''''''''''!!!
PPP&&&
&&&&&&
&&&&&&
&&&+++9++PPP
!!!''''''''''''''''''!!!
&&&'''
PPP&&&
&&&++++++PPP
+++'''
&&&PPP
PPP++++++++++++++++++PPP
+++'''
HHH!!!
PPP++++++++++++++++++PPP
+++!!!
&&&PPP
!!!HHH
HHH!!!
!!!''''''9'''''!!!
PPP&&&
&&&PPP
PPP++++++++++++++++++++++++PPP
|||===
>>>|||
>>>||||||||||||
|||===
{{{===
{{{{{{|||
|||||||||
{{{===
===|||
==={{{
{{{{{{{{{
>>>||||||||||||
==={{{{{{
{{{{{{{{{+{{{{{===
>>>|||
|||===
|||||||||
|||||||||
{{{{{{{{{
+==={{{{{{
==={{{{{{{{{{{{{{{===
{{{===
>>>@@@
@@@>>>|||
>>>>>>
||||||
@@@>>>||||||
@@@>>>
|||>>>
>>>@@@
@@@>>>|||>>>@@@
Twohorned
%(@|-@
MSVBVM60.DLL
MethCallEngine
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
>>>@@@
@@@>>>|||
>>>>>>
||||||
@@@>>>||||||
@@@>>>
|||>>>
>>>@@@
@@@>>>|||>>>@@@
|||===
>>>|||
>>>||||||||||||
|||===
{{{===
{{{{{{|||
|||||||||
{{{===
===|||
==={{{
{{{{{{{{{
>>>||||||||||||
==={{{{{{
{{{{{{{{{+{{{{{===
>>>|||
|||===
|||||||||
|||||||||
{{{{{{{{{
+==={{{{{{
==={{{{{{{{{{{{{{{===
{{{===
PPP++++++++++++++++++++++++++++++PPP
PPP&&&
&&&PPP
!!!''''''''''''!!!
PPP&&&
PPP++++++++++++++++++PPP
!!!HHH
HHH!!!
&&&PPP
PPP&&&
&&&PPP
HHH!!!
!!!''''''''''''!!!
&&&&&&
&&&PPP
!!!HHH
HHH!!!
PPP++++++++++++++++++PPP
HHH''''''''''''HHH
PPP&&&
&&&++++++&&&
!!!''''''''''''!!!
PPP&&&
&&&PPP
!!!HHH
HHH''''''!!!
HHH''''''''''''''''''''''''''''''''''''HHH
HHH!!!
&&&PPP
HHH!!!
!!!''''''!!!
!!!!!!
!!!''''''HHH
'''!!!
&&&PPP
HHHHHH
HHH!!!
HHH''''''!!!
!!!HHH
HHH!!!
!!!HHH
PPP&&&
&&&PPP
!!!HHH
HHH!!!
PPP&&&
!!!HHH
HHH!!!
!!!HHH
HHH''''''!!!
&&&PPP
HHH''''''''''''!!!
PPP++++++++++++&&&
&&&PPP
!!!''''''''''''HHH
HHH!!!
+++PPP&&&
++++++
!!!HHH
++++++
++++++
++++++
++++++
HHH!!!
!!!HHH
&&&PPP+++
!!!HHH
HHH!!!
PPP&&&
9&&PPP
!!!''''''HHH
HHH''''''''''''''''''!!!
PPP++++++&&&
BBB9!!
!!!HHH
HHH!!!
&&&PPP
!!!''''''''''''BBB
PPP++++++++++++&&&
!!!HHH
HHH!!!
!!!HHH
HHH!!!
&&&!!!
&&&PPP
FFFHHH
HHH''''''!!!
!!!''''''HHH
HHH!!!
PPPFFF
&&&'''
HHH''''''!!!
!!!''''''HHH
PPP&&&
HHH''''''''''''''''''HHH
HHHHHH
'''!!!
HHH''''''HHH
!!!''''''HHH
HHH!!!
&&&PPP
!!!HHH
HHH!!!
!!!''''''''''''''''''!!!
PPP&&&
&&&&&&
&&&&&&
&&&+++9++PPP
!!!''''''''''''''''''!!!
&&&'''
PPP&&&
&&&++++++PPP
+++'''
&&&PPP
PPP++++++++++++++++++PPP
+++'''
HHH!!!
PPP++++++++++++++++++PPP
+++!!!
&&&PPP
!!!HHH
HHH!!!
!!!''''''9'''''!!!
PPP&&&
&&&PPP
PPP++++++++++++++++++++++++PPP
||	@@@
'&&'&&'
	''''''''
'&&'&&'&&
'&&'&&'&&
'&&'&&&
'''''''''''''''''''''
'&&'&&'&&'&&'&'&&'&&&
'&&'&&'&&'&&'''	'''&&
'&&'&'&&&
'&'&&'&
'&&'&'&&&
'&&'&'&&&'
'''''''
''''''''
'&&'&&
&&'&&'&
'&&'&&
&&'&&'&
''''''
#$##" 
'&&'&%
#$##$!
'&&'&&&
'''''''
$$$$$$$$$$$$$
'''''''
'&&'&&'
'&&'&&&
'&&'&&'
'&&'&&&
'''''''
'''''''
$$$$$$$$$$$$
#$##$##$
#$##$##$
'''''''
'&'&&&'&&
'&'&&'&&'&&&
'&'&&&'&&
'&'&&'&&'&&&
''''''''''''
''''&''''''''''
'&'&&&'&&'&&'&&'&&'&&
'&&'&&'&&&
'&'&&&'&&
'&&'&&'&&
%'&&'&%
'&'	'''&&
'''''''''
'&&'&&'&&
'&&'&&'&&
'''''''&&
'&&'&&'
%&'&&