Sample details: 6592410af61ff1d70d56be901df9e5cf --

Hashes
MD5: 6592410af61ff1d70d56be901df9e5cf
SHA1: e301f2ed5fb45e7a27deb7207b0a0c7c8e162664
SHA256: a7319a9c879ac1e4c350cec927d62d7aee0e9348648fde839ded1086f2e5d912
SSDEEP: 3072:6pDKetSzNQNvrmatMYQOF77wou04RhpDKetSzNQNvrmatMYQOF77wou14fjaOOzJ:6+XQ4fjN13q3h7VMrK
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Basic_v50v60 | YRP/Microsoft_Visual_Basic_v50 | YRP/Microsoft_Visual_Basic_v50_v60 | YRP/Microsoft_Visual_Basic_v50_additional | YRP/Microsoft_Visual_Basic_v50v60_additional | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasOverlay | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/SEH__vba |
Parent Files
06538a6d01576804896faac84a4ace9b
Strings
		!This program cannot be run in DOS mode.
`.data
Projeto1
MDIForm1
MDIForm1
TTTTnUoUTTTTTTTTTTTTTTTTTTaa
zTU]^j
Tcb`fg
zza]b^`
777777
xTVXYd
777777
777777
ypUX[`_
777777
A77777
zxvyyyyy
yyyyyy
yyyyyyyy
)05;:,L````77
7LyK:y0ssrQm
XxyqF$vh2@M7
p\81B`
77``_GfJ
U>[Z~;
7`77X`lnb3et>4]^l`mX7
7`777``xkh
d[e=sGkl77*
7```777`7^
7`77`77X`|
3ueJE(Gg
7777777``_GUf
]z9SS>/q0gH
7777`777mL6
fv}kKU3JSu?(+MH
77```77mx^
UY9>~/(KBH
7````7m`}qf
wmX*_aG@i~
I/(:00
77```7X`
]p1^x777xL|n
3uSTCI>u
777```7XX
yx777m
7777`77``lr
[eT33N
7777777``
mm*Ayo4
S>i@Gy6
%49SST
7777`xybz{||V2IStJY
777^opqr
3Stu/qv}L`````7
3(GwL`mm`77
ce9f:g
`m``77
*7AKRZ
*7``77
d9UV|x`7
M%3St>s^L`X7
*QB;=J>=8K_7777
M;3>RF(2GQ*7
3TR50K;GH**
77``77
&549.:-B5q0Q*
777777
#(34KA
"-+f/$-X
#"*&+1
333m222
KKKZIII
UUUh\\\
___}ggg
jjjliii
nnnYnnn
kkkkooo
eee|hhh
___j]]]
RRRYSSS
CCClGGG
555E666
KKK;666
VVVD___
oooDkkk
uuu:lll
mmmDjjj
cccCkkk
aaa:```
IIIH+++
)05;:,L````77
7LyK:y0ssrQm
XxyqF$vh2@M7
p\81B`
77``_GfJ
U>[Z~;
7`77X`lnb3et>4]^l`mX7
7`777``xkh
d[e=sGkl77*
7```777`7^
7`77`77X`|
3ueJE(Gg
7777777``_GUf
]z9SS>/q0gH
7777`777mL6
fv}kKU3JSu?(+MH
77```77mx^
UY9>~/(KBH
7````7m`}qf
wmX*_aG@i~
I/(:00
77```7X`
]p1^x777xL|n
3uSTCI>u
777```7XX
yx777m
7777`77``lr
[eT33N
7777777``
mm*Ayo4
S>i@Gy6
%49SST
7777`xybz{||V2IStJY
777^opqr
3Stu/qv}L`````7
3(GwL`mm`77
ce9f:g
`m``77
*7AKRZ
*7``77
d9UV|x`7
M%3St>s^L`X7
*QB;=J>=8K_7777
M;3>RF(2GQ*7
3TR50K;GH**
77``77
&549.:-B5q0Q*
777777
#(34KA
"-+f/$-X
#"*&+1
333m222
KKKZIII
UUUh\\\
___}ggg
jjjliii
nnnYnnn
kkkkooo
eee|hhh
___j]]]
RRRYSSS
CCClGGG
MDIForm1
Projeto1
Projeto1
MDIForm1
Module1
Module2
Module3
Module4
Module5
Projeto1
MDIForm
C:\Program Files\Microsoft Visual Studio\VB98\VB6.OLB
USER32
CallWindowProcA
tbgxs8o
wynEQvv
HsZnYrM1
GetUpdateRgn
GetEnhMetaFileA
VBA6.DLL
__vbaFreeObj
__vbaObjSetAddref
__vbaNew2
__vbaFreeVarList
__vbaAryVar
__vbaAryCopy
__vbaFileClose
__vbaGet3
__vbaFileOpen
__vbaOnError
__vbaSetSystemError
__vbaAryUnlock
__vbaAryLock
__vbaErrorOverflow
__vbaUI1I4
__vbaGenerateBoundsError
__vbaUI1I2
__vbaFreeStrList
__vbaStrCat
__vbaStrMove
__vbaI4Str
__vbaUbound
__vbaLbound
__vbaVarCopy
__vbaFreeStr
__vbaAryDestruct
__vbaVarMove
__vbaHresultCheckObj
__vbaFreeVar
__vbaVar2Vec
__vbaAryMove
__vbaLenBstr
__vbaStrCopy
__vbaAryConstruct2
__vbaStrVarCopy
__vbaRedim
__vbaExitProc
__vbaObjSet
__vbaVarSetObjAddref
__vbaVarAdd
__vbaVarNot
__vbaBoolVarNull
__vbaVarLateMemCallLd
__vbaVarTstGt
__vbaObjVar
__vbaVargVar
__vbaLateMemCall
__vbaStrCmp
__vbaVarLateMemSt
mctCEPibKNqx
nwKwtmI
H02dFiR
MSVBVM60.DLL
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaAryMove
__vbaFreeVar
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
__vbaExitProc
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVargVar
__vbaBoolVarNull
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaGet3
__vbaAryConstruct2
__vbaObjVar
DllFunctionCall
__vbaVarLateMemSt
__vbaLbound
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaUbound
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVar2Vec
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
__vbaLateMemCall
__vbaVarAdd
__vbaAryLock
__vbaVarLateMemCallLd
__vbaVarCopy
__vbaVarSetObjAddref
_CIatan
__vbaStrMove
__vbaAryCopy
__vbaStrVarCopy
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
333m222
KKKZIII
UUUh\\\
___}ggg
jjjliii
nnnYnnn
kkkkooo
eee|hhh
___j]]]
RRRYSSS
CCClGGG
)05;:,L````77
7LyK:y0ssrQm
XxyqF$vh2@M7
p\81B`
77``_GfJ
U>[Z~;
7`77X`lnb3et>4]^l`mX7
7`777``xkh
d[e=sGkl77*
7```777`7^
7`77`77X`|
3ueJE(Gg
7777777``_GUf
]z9SS>/q0gH
7777`777mL6
fv}kKU3JSu?(+MH
77```77mx^
UY9>~/(KBH
7````7m`}qf
wmX*_aG@i~
I/(:00
77```7X`
]p1^x777xL|n
3uSTCI>u
777```7XX
yx777m
7777`77``lr
[eT33N
7777777``
mm*Ayo4
S>i@Gy6
%49SST
7777`xybz{||V2IStJY
777^opqr
3Stu/qv}L`````7
3(GwL`mm`77
ce9f:g
`m``77
*7AKRZ
*7``77
d9UV|x`7
M%3St>s^L`X7
*QB;=J>=8K_7777
M;3>RF(2GQ*7
3TR50K;GH**
77``77
&549.:-B5q0Q*
777777
#(34KA
"-+f/$-X
#"*&+1
555E666
KKK;666
VVVD___
oooDkkk
uuu:lll
mmmDjjj
cccCkkk
aaa:```
IIIH+++
333m222
KKKZIII
UUUh\\\
___}ggg
jjjliii
nnnYnnn
kkkkooo
eee|hhh
___j]]]
RRRYSSS
CCClGGG
)05;:,L````77
7LyK:y0ssrQm
XxyqF$vh2@M7
p\81B`
77``_GfJ
U>[Z~;
7`77X`lnb3et>4]^l`mX7
7`777``xkh
d[e=sGkl77*
7```777`7^
7`77`77X`|
3ueJE(Gg
7777777``_GUf
]z9SS>/q0gH
7777`777mL6
fv}kKU3JSu?(+MH
77```77mx^
UY9>~/(KBH
7````7m`}qf
wmX*_aG@i~
I/(:00
77```7X`
]p1^x777xL|n
3uSTCI>u
777```7XX
yx777m
7777`77``lr
[eT33N
7777777``
mm*Ayo4
S>i@Gy6
%49SST
7777`xybz{||V2IStJY
777^opqr
3Stu/qv}L`````7
3(GwL`mm`77
ce9f:g
`m``77
*7AKRZ
*7``77
d9UV|x`7
M%3St>s^L`X7
*QB;=J>=8K_7777
M;3>RF(2GQ*7
3TR50K;GH**
77``77
&549.:-B5q0Q*
777777
#(34KA
"-+f/$-X
#"*&+1
TTTTnUoUTTTTTTTTTTTTTTTTTTaa
zTU]^j
Tcb`fg
zza]b^`
777777
xTVXYd
777777
777777
ypUX[`_
777777
A77777
zxvyyyyy
yyyyyy
yyyyyyyy
987699568509745856
oacljgfey{uy}~q
!;|q8vtu
,!%&i'9&49<=?=:330;578
HKKICOOLOACLJGFEY[UY]^Q_Q^\QTWWUgkkhcmo`ncbaegie,*-K}rp}p
sq{gwt
-#%.(%8;;93??<?13<z76
GKKHCMO@NCBAEGIEYZU[]RP]PSSQ[WWTgikdbonmacmaefigyvty|
ssp{uwx
)+%)-.!/!.,!$''%7;;83=?0>3215795
GIKDBONMACMAEFIGYVTY\__]_SSP[UWXfkjimoamabmcejhex{{ys
qs|zwvu	
yL ]&Q&X 
Dkn%_t
a> NX"
_K;YQU[U
kxzf`FA[
Y@L6yp
56C,"|s
7l=Qw<
l>1^AXa1
6mVAb"
RcQ3r N7
<S877;
IGVZNy
$[E|XWkl^
]UFW]BjveKmFFs
O@"Mb*:`pu
_ZGDD}
LMNJ2y
!fE''$$&
wO{vsp
sC23r)s
<VPh.O
FYY'c.
##Z(i`
^ZQ@BF
_!?x5J
H<tZDStsLi5
~p+qHRK
x04;zH
$sF`_,
=Fqpu}
=&'Zi!n
x-%^m^2N
[o?@G^QF
z=ytO2_Ar
dRI4]k
2F)s~ 
nLw\?P
<7`^9"
o;/,]u
DE$ym_V
3e@tq.
q5C>@b-A
Wj{?1A
qSlW{5
5E+KjW/
 N0t)I'
$%#"g##o
4#|4hdJ
9o~snV
Z	rfOZE
2REjI_
(]<QTe
-Oy&u-Ht
oiduGC`Je^`5
;!cFoIVk'
AAx[u}5
SSBUZk
.\l[aeepCSeO{
! 1$`/F
bn!a&/.#
7NBQI0O'
7L?G@LC
$Q-^Mq
|GyMv^CqS|eleo
k	h9e?
GvDcB\u<10K8D5Xm6q
Qob[d[lX
;/*,&XS#B!p.z|)
rsyyGv
W{[UHEK9L)
iPV;T8
<40L1c
m8n#^i
qiAUHP7J"I+
(	 V,j
dlGUFabb
ABU=^~
QbD:c'
0;AmO)x
0|0HdP
}9O1a-
4}R;",
~vbj[|
MWBoX(`4
$zH#E~3@J
#\jQG5
m{`6"t,
"v+x[KMx
y(dmt>
T}_6A=
,4|V8)
l.(t@yu
nyP0/%
k~nE26+
A]Wmjp
ydI,3{
{~{$&C
(F7&>U
&&}6BI
nCTLLp]
-n~m1'
s\j<2c
)!#<"=<9)
]87+h5
@;Ih)f
me._slkG
l.|gSnbJ
L"o#oa
@;*g8QkNq
b8ehig,-
] ~sB{W'y
M([{uT}
l)(1)lr!V
	.0jW	
Yf*{vOD<\
*Xky/S
hykHYtcjf[
1|wWr=;UhsgeN
*<(=)3
W`mkH3Z
GIKDBONMACMAEFIGYVTY\__]_SSP[UWXfkjimoamabmcejhex{{ys
qs|zwvu	
)*%+-" - ##!+''$79;42?>=13=15697
FKJIMOAMABMCEJHEX[[YS__\_QS\ZWVUikeimnaoanladggew{{xs}
p~srquwyu	
)&$),//-/## +%'(6;:9=?1=12=35:85
"7=8/-
-"#"DG
,%/.9?
-5;SRQ
m`ccakwfd{y{tpN~}qs}quvyw	
(++)#//,/!#,*'&%9;59=>1?1><14775
IJEKMB@M@CCAKGGDWY[TR_^]QS]QUVYWifdiloomocc`keghv{zy}
q}qr}suzxu
'++(#-/ .#"!%')%9:5;=20=0331;774987699568509745856