Sample details: aaf23a74952a269ac9923b34cd750f57 --

Hashes
MD5: aaf23a74952a269ac9923b34cd750f57
SHA1: 807b0dac2f7c7a58ee6d1c5a6b4e1b7f62fccd2b
SHA256: ea0e0a82508626e8b1d244b65f1ff73f7afb45e10f171480752dffb2e90606ba
SSDEEP: 12288:0sVptvNBTXu3wnaBj/uKZLxBiTpc7ITJgBFlp423Qc0UMD0Q5c9:0QxXlaZ/pZLxIu7IT2Bv+ZcL45c9
Details
File Type: PE32
Yara Hits
YRP/PESpin_V1304_cyberbobnbsp_nbsp_SignByfly_20080310 | YRP/PESpin_v1304_Cyberbob_h | YRP/PESpin_v1304_Cyberbob | YRP/PESpin_03_cyberbob | YRP/PESpin_13beta_Cyberbob_h_additional | YRP/PESpin_1304_Cyberbob_h | YRP/PESpin_0b_01_CyberBob | YRP/PESpin_V1304_cyberbob_20080310 | YRP/FSG_v110_Eng_dulekxt_Microsoft_Visual_Cpp_70 | YRP/PESpin_v1304_Cyberbob_additional | YRP/FSG_v110_Eng_dulekxt_ | YRP/PESpin_13x_Cyberbob | YRP/PE_Spin_v04x | YRP/PESpin_v1304_Cyberbob_h_additional | YRP/PESPin_v13_Cyberbob_h_additional | YRP/PESpin_v01_Cyberbob_h_additional | YRP/PESpinv04x | YRP/PESpinv1304Cyberbob | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasOverlay | YRP/maldoc_getEIP_method_1 | YRP/domain | YRP/contentis_base64 | YRP/suspicious_packer_section |
Parent Files
c0c2b9507464726f018a85d01427fcfe
Source
Strings
		!This program cannot be run in DOS mode.
.WWPACK
.WWPACK
.WWPACK
.WWPACK
.WWPACK
-:C*4uV
\r"@,;
G;_m( 
e1"Z>s
"00S<[
$<H sK
<~`{ty
WilW!k62
Hhm.eu
n'$#?}
X>\^9|D
rV3s'g
q'/:$6
IUdO$;b
FYS7('X
;RT)5(
	ER^kr
&YeJZa
fULOHHy
>FMKyV
 `q~{zz
;_^]\CBA
f4VK}'5
+zQDIM}
$vnTz_
NhHjJd
33b(W=2
p*iUiMvd
*@^eFB
{ElzC_o
6^\nEP
nx(xEFE
$3t0RS
zGU=SfY
USER32.DLL
COMCTL32.DLL
KERNEL32.dll
MessageBoxA
InitCommonControls
LoadLibraryA
GetProcAddress
9gJrG-
JyH%~7!|y
<WRYo6
zNx	0g
Qu/#*Vg
jT|D9V
P;5}qw
}1s2g|3J
8Wm#3~
]UbbrL
K!$iNS
kzY"]<
oc:-C{
K!8;bj
i^|Tin
A7%4R]
u>.<U\1
289rN/
DLEIb!
%1r/([*$1:?{ !P#
51234ok
5nI^];
rstmvwx
>?@) CDE
N:U:SdUV
@GVQ"5
J#d%&u~
MN%T9RcTU
+C--./1
5(w>90o'9<{>!|;>4
psn}l+.D
uMKO	t
a[vMTwk\
JYa+vA\+6mX[k=L{ou03BQxs&]DCC
=fCmX*
~t>rRR
O[&+gX
CqJs"Rw,
!7%\i"|
:wfGJyzkFGVwjKJ]vgFGV{jKFavgJKb{
aabc{a
C|MN& 
\^_7Vb[$A
;Z~/(O
BBB999333
999999)))
333)))))))))
fffUUUUUU___ffffffUUUUUUUUUUUUUUUUUUBBBMMM333
3333ff
""""""
3ff3ff
""""""
www"""
"""""""""
___"""
))))))
))))))
UUU)))
3ff33f
))))))
)))))))))
UUU333
33f33f
333)))
)))))))))
MMM333
33f33f
"""))))))
UUU"""
""""""333
)))"""
333)))
MMM)))
333)))
)))3333
333333333"""333333
333)))333333
333333
333333
)))333333999999999999
BBB333)))999999
)))333333333999999999
BBBBBBBBB
999999
3333333333333339999993
BBBBBB
BBB)))
333333333333333
BBBBBB
UUU999
3333333333333f
MMMBBB
UUU999
BBBMMMBBB
"""UUUBBB
33f33f3f
BBBBBBBBBBBBBBBBBB
UUUBBB
BBBBBBBBBBBB999999
333UUU999
999999999333333333333www)))UUU999
""""""___)))fffBBB
fff)))fffBBB
___999
BBB999333
BBB999)))
333)))))))))
fffUUUUUUUUUUUUUUU___
0]]T@9wNj
ndG=?s#
L~^fEG
v_zT`p
t?y#|O.^9*
iaA/'{'H
f,wC_}
?R`A~^
J1v_m|J
2+vX=R
^uUUAR
()KXJB&
&D([0/
Y/j1vd
!Gv'nw
X "U +
/)\@/v>s
ep#ulv
?0x!sT
`AB6;+
j=3`JNV:
aR@I[i
;mN;Ppy
m^p%= }E
;Wi$77
k=J*zp-m
Eqb28`D
2iN ]I@
*150kA
2gRR~s
74o]?_
yC&65m
VMVxF4
KD=[;R
<oy<z{
!fQpr8
apIxL;
DuBo68C
4<]j|2
Uu\6^c
8RsnZ%^
<x%&ac4
y*K@Bv
U>}3w,*
GR;l|z:s
H$*b>5
]M$"e)UO
:2|@-nx
@wre9>?
`Ajxf{
YH6WYp
VoyW[A
9;tI-(L{
{+7P#i
N2+@S/
l3:Ife
-Lfe{ //M
varm45
D1Q"$b]
\/|O,T
Wf%x A
m4CmLd
21=L+	*
kYL[<:
o"d_4Ci
Svw]v#
6/xHF{v
Qnc&#W
Vi9!5X 
&:5I!U
4CB(_D`
c|pHaZ(
yxhA-Y
HGkYqb
/*ob1wH
JSdor9
!T^-o7
{H8[g:
mGw:[af
!XzNWR
/'%6#w
k+E+%=
NUg2LJ$[
jYD]N3
{DQqb)
-SZG/5
4M*X3i
zX9^&K
KxLV!AN
r[K`2r`
&OH0gs
,g2N 	
LcyBny
5KK])$+
9(.^U9
^jy%qM
Pg';S1
sdRFS$
)c:9+`
?GNF<:
h5<"4`
(vK-5l
uD"tA\
.M>S1CW
uH2RV3
Bn}Nu^Q
U)&s_I
#'l"|_
f=G>nYq
))%p;B%
i@[-7I
zHQJbZ
IipH9,,
"z$96C?Q
dCti0@
;5QwWhqy
qD3#2C
r7b`r-]
4\iv8`u]
\haX}XT
eCXUx,
m.>+RG
H=:VE1
vwL**s
[pP*KO
^2:Z.$R
q<u<oRK
<<|g_]*.-
'QPTUD
]<LB%	ZRU
%P/.S[3'P
Y&An8&aq
{+NeZF
m5k"V_
XuU	O=
6W?8'%N-
<A5pQ>
7bDH/j
Ybmoi,4BP
tsa&qi
3xfM'{
[RROwV
C>t'):2
	yO=D}
}e@z}#
9?_![@
!|u})w
Nu't)c
8i46LA
1ulo_Z
7B[O	n
!9  Ik
~N*#f,
`{cM1n
'mYIFXy
AasSzk
&=-U$h)=9
6$Mma2
4y:jRd
8!\R(F^
E^Pv]g
`@>C3X
rapHHZf
nWT-f+X
/d#",>
Wfb!I#
b:,6;g
B0Qfr!
6% ugr
-I{,DT
o	SUJ#?.
osC],T
I/Nhg6
'HkMnpu
Rp,";F
SKy>:P
T:1!Ahh
HD|sXxt
=\Xx-p\qb\
[2G]ZL
Y!:+>R
s	onkH
aIWW+ 
K9Vp:x
P[o"aj
9.\a{BH
$4#c6f
o#(3_-
-];DS:t
jHD@Vj
CePYAl
'1/S3o
3td8G<
`?K,`W
ej$oY<V
a[,K!sb
!dHWUZ
wYLvZ\
5dfR^I+;
gbcJl2
k*;wpjh
~}_O0f
YMVFQ(
 U?-_Y
AJ9P~l
&;U3u3`
CA0%<@
#v'gy:
Q{KK'y
9y}<cmg
\k(~|L)I
{*6|}@
p;!ddl
8~J Vq+
{B\E'DT
3uzrdB
/k"}(?
m?OnaV
X>s	*Qf
36L~&(
E[3L^h
s#UD#%
9+4@YY
Ouu0t8
b>a%8'
?jmq+hc
N\Ko"=E
t84+Vr
NFq$(~
GC;0w\
`lv4mJ
MQm)CQI
}kwgN=
TF_	c+&
"d.0u=
{&3	i.
zi]^K>R
.Y%_NZ
s+]_]|u:
[4M,//
z&_grr
zH-vb!
p`@757
w\%HzEECr
qv>d	Y
@C<Yl@
{>t{x[
!*(IXae0Y
/~i>UP
Fn%{X"6
UD&#K3
g<^BAi
laS]lxK
$`ngF\0
En~EL)
f)\qG\
+rLx<d
)do*K{
=L(uLo%
Fy#$;LDw
N).w}u
]nwqtO
jeWE)#"bm
DS(@``
jr=]A[O
?8@ tX
&k..zSdc
XM6M~;
wR6R=L
1]j$NO
Wg;x|>
ZNwC6w
&o'`d"!
`LlDEh7c
[=`ezX%
b!>sUr
glv ,ZT
T_YSk[|
Bp;z~--
cxSzNf
eMg[w,
99%WYq
lY"x1"
}7e&k@m
(T2D5>
eb-oTV`
A]zI<C
W!"jy8
YdK4vo
}dk&Zs	
(\nJr\
9_EPB(x
xg2Mua
/jWDYxr
UULb0.x~
Bx_`RmG
b>Ih1q:5
,2#b@gW|
j_@7lI
m,]S	>
>X2C}Ha[
G6u'/HrWLZ+h
.9}6(E
pxNcDnDx2
z4Ee{GAg
r{l~[X
OhzT0hf
~h"Cn#5r
R[1G5(UT
roO`fB
^M"Uzh
Ir3lPKu.
ryf{9\
UeS*\B
7Ecne|
yr\h(m
d4}fLv
C8qco|
2O/P7x2
v/ZZR!
whqi_'M
SlEjVH
czRb 3
3K1V1b
_$xFRC
ZP=j_-H
-0)Nh"
SKdu	*1
Hdl=W'6
5]a~q.E
?eB+O_
ofEBDm
L5'FN:N
O!*x4pZ
AOez'L
Ou7".g
%R4s1E
*ND_5]
*|;Bcx
i{X1p,
	Z/=&C
%s>v	W/
2L&ct"
t!%#~U
mF'(<;
:7~]j	
Gek8u\
+'{Gh*Z
g% _YC
 3MJ6N{H:
L<MUHb5
zn#2c(
~kl)E.6
CmWG	@.
}F<8UVB
K}6O|{
f@Js5I
|."	Hm
[1#O:iy(x
sl2qGH
9xc+>!
"XiFQpSu
}A]\%OhA=:J
N,&(sh
`IrZA{
PW_U`q*
ZR(]%+
qn]Fq5
;OjKR&
rr/#M=	
38aSUi	9
SI{$|#
\ "B#G
'Jg (t
YyxRnm
{l|m,q
K);-m5
U&^T~I
3"vh5i,$
o8Bg1%
$D%OwLl
h!_)Cn1
5$[tX/
?B0JWA
bl[7p[@O
=qn9J?
*mdZ*Q
]sxSE]Ub
iDp=R;
>21\:;
.m[m>H
A3i%Q`
0I*(mD<
xP[k=j
g+)m8)
:}hmRv
w_WmF_v]
'c*ovoC
zyhi!r
'eMxuCX"T
SP(}>n
TTksaRP
l-XUC(]"7k
m[	yxN^-
At[VQ?a
n6zw=$K
]t5O/2J
`;\)G-
O4(W\i=
gwwB3hr
Tg*@53
0y8X62m
C1aTF:
>G*ta1
/_\=wy
Vg&jDL1
Bw);M4
	*\o9~Lu
gX?](n
&T;UWB
]E\zqa
NaXw@?
c?JW?CvO
3zyEm9
?Yj9.3
@	\".?;e
EHrYr..#
&8t.y(
0mVQ7K]
Em^St	
yn3TLc
2X3Wf(f
0^,%![
MVX=zW#
z^DqE+
lCq1/N\Z
P\QX's
Is@S<a
P7oA]j
Y\Zpys(
ricLW=
Sdh,7:/>!Gj>s
'H;e)D
7z)jen
{mqOZ=
r)b/(}
]<$@d;6
4HlJRV
	uV{7,
+67U0D:
J{Wi$i
!}K.OB
tHX>/+4
2 FXin|fu
MAt<|S2
V{\vF;
azd5)qV
XeN-7I^[
{=[A E
F"PI@"
V:XcE:'
L3wtNm{	
qLu-d,E
@8s]OK
Qiv+6t
TD5z!U
}Io 'R
fw`pP^
~mdEfa
vQ8$QA<
;]r]$.
:mprTD
,]O2	uT
ZZ9`{7l"
$z+LX"=r
+`|H1)
=3U4	G
o;?^5/
@^}@y|
THm3HJ
9I#EZW
Z	CoqS
8:hEzk
$%sm:/
[L]05|
]t`@Fx
c_2P7B#
BkKI<mF
/nW&H$
u}LR94}
vtvT1`p
F9@uV}
I1BH,e7pp
oFmsC&
hB6D"]
W&qZ:4
i^Qe4N%
IHDvudO
\1'c1g
n~e$lt
q0UKX{
IVbar(
p-(`As
3ZX4pX
Rq:h?)C
wLahJwp
	,\Gb>
%@e~_D
x;@w9,A
#HSq"s
y|>kX<
L&(x)(
	JxzYZ
:ZZ$5%
j?s(" 
cO3Nz 
%,1B6m
Mq`\2q
V@ J$7|
3ahVEw
up{m|2
FYSQ,J
l|Lym[^4
2NT|B\
N^=YCzU
n[S^VU
~LFG'xP 
~!eEdv
N9#{ZM
0$RHo;
;}WAq@
>%Zu0B
HxXu^?
n|dGQ/
)Ac_}S'
fj<:s6
/+u82DX
@H=?v}
	~M_@Uc
qSTj	bpM
PxuDBa
I20i7P
WKZBw#
JRD<8)'
"/ aCr
5	?5*+X
R]@X{hy9
#HlN)^
HRH8S4
x<A%G1
!t<~&yI
"q}k2[p
{010=QV.9
0J?DxF
|u"YM_
?\GQtR\mrs
N<X;$a
MA||K@
S$k	Zv
DXv_2@
86j2R@
G7-<<	
n/W"!y
]PxQSj
:A4V[w"
K6)d#y
 "?rS.
EQ%*{J6:
mC,@af1
WmpYZS
!ifOH:,zr~-i
h>VY#*S
wYEsYF
jA4~l<
}@	26<	
|jm4^X
MiAH:l
N5I("0VMs
S3DKNZd
z.TQ\P
Hs$2k@
THeu7^^-
:,	}+*jN
Ivx&M`.
gXJPgX
7GLfgb-
(+tgq{
zig0-2
=~86WF
j@{MEB
h@mW~l
TNA/o5
:c}!%e
kv~.OL9
o*_sfP
s]J?mi
`!^)s.6
w8DSI+
sC+Si 
J?U5=/-
M#Zi	r
1K.&s5
 (ZjnjTK
ptpx4\
L% a}A+b,
z"]	K&
F;AMRi
,+jUA2_T
P~[ry\
or^>SD7
k@G%5f6
&2cl>;
(`t2.=
zmu@OD
;o"9Vt
!FqvB9$
(- 8l)
c?GtnT
ZqXAn~
i:nRE %h
F.HmD%H
#+SRZXL
:$2DN~
$rHUZ/D
}6RY(svV
|gsKFS,
Aj'QpKg<
"5h=4v
Db<Y)c#
s)*#PC1g
1MNb	d&
gY7JgJU5
Um40B0
D!0,1FUK
#KMj{g
pjAK3	
WbLxyL
Wo? |_
bE[,e%
<GoFaQ
>QjH]|
mO#dj>>
(ZVK$9aX
yJ@#^n
[bZ,g\u
df <fy*
x}C$<B.6
lzM_%IH
tLc/	V
]0Y@r{
dq~=*K
=~vEwyh
GL/:9$
z	8T6_
$u?7W$,
3oy1$S
AO?YqsDA
xu_bsY
X-!!m>ZR^6
l}r}a'JPdmX6
a|WB^;
^=j"l]
)fZeD<
XfR5Tn
IHwG}p
CiN6,j
}z-5uD
V0RS%S
G*:T\]n
}?U'$O
v8hbJ4
|A>3m#
,'Knz.pI4
FppvL|:/
eiU@s-r~F
qRE^f"
	HKVy.qNS
 C>v<M
522z/.
<]REt*
.s&M.3w
I7a&g0
NWP;2^
2Hw3=0)
.q&FT6BW
Dx^f}Y ^3
}C7CX|
X3+U\0
zSa7ew
j)lKSc
<1)9.9
t@:|n^
 00SF8-&
L!{4K/2
O|7)j'
 PJh+"
<Jq|J<
lXg,t]q
kLFv)@4
`m<a-	
x;{Ly'*
gjax,N
*cj~x*S
|s'zDn
M2+AeH
IxK/v(
8=Nfon
YWv?UM
~{Ih[B
TK8z4Exk
djf,[/7
2OWtwk
df~C%j
7_&&6V
PhvM"T
pu&/=	f3
pGNbh	
+9_[e_
TNt>	L
|p6$Y>
e*|mPe
GFg-B<
T"u:sOH8
Qyus$9H
v:g[o#
z=+St{,
lAeqc/M`r;f
B~ucO\#
W{]}@0t
WO-aX>
;qe?'1{
$y6~*}
HrUTB[
!6.HwA
).@7|EZ
A va-?N
$54\Y{
PXu^tp\
#R:!7Oh
 N!e@fu
V1;q<`
8"SYQ2c
(xn!=t
iCzRaI
Gs=<U]
=?'t[*L
?:zg!M
x@2o~]
s_z}r0PTH
Sx LBI+
MYF=-V}
wr=}4->*$X
Bv`Kos
6|&;g66R
ve0YrM
=.}Ph<
U]6j(.\
uxalIm
3eHu~k
P'[bS!O
kDlbiY
A])vJV
IkjLlD_
^hwQDZ
=	G?=,
7\=0Oe
l;f>?f
'LT+0:T
EL{d7R
K$F5?;)
a,B%i8
8G\{!G
@uk/=b
iKBfzB
R,mTFNb
(XJ|Vb
b^fj8P-b3
gaX	jcYG
=+ j	O
j!{-QM
%Hb}gqXR
cXjXH	D
0MbP6&
UB7)4#
Oz#BjM
!D3D,;
hr*;Y!=8
NVQ%@uF
_e"Zm!
``(Rd{
PL5;\0
\	MQ~j
I!tAfo?sx;
:w'M?_wm9
#'^>fa
j<Jkk-
n=0nh5
LX)M>T
&I:}u}(v
X%~7E}
<3XgFt
E.m{hn
G&cXrDq
V/UtbFC
s,>c"!
QP%WVI
7i8M$5#+
/C4w4"
6C|IRnZ
;*D~},
jhnchh^
>aN,U3D
Z	1WfX
%t2'Qya
QP\1;@
bJ]pRF
[2nM91z
?W,lu{U^
6B4wE!}(
9EW_2:
wH+sBA
g lxHM_
R2VC3/
9:}?WM
><ZpU+G7,7&m6
:;mp~!K
lq]Yj!
kZUnhZUu
l\r6v_
csmjh8
=l@8Md\
AMgd*Hk
(@<lGC
RzkL\wbZ
%l=A^&`^
2LgeI5K
--jt\>k
0d"ou3(a
fJRe 7
h%e\C>RW
nn1wfd
PAJ90;p
;,eI'-
&@_|aK
j\VFJD
v@S(<W
QtLO[oA
HKRFFWl
C8Rhm%S
Yx -+s
>w]zhr
Vq-S^o
\x_-qg[$
&@_|aK
.4UF]R
yi\-YST
<F:Eg3_
fHsN{"
E17}29
b<}9m,
I`&We;AG3
mNwP:vR)
_]	rz!
(q:f1=
GsiuBky 2
Gr{Onz
[g>-/}
JcGr5.
:!<]{x$-!
CkD7}7
_}m&~>
H/mB@h
#Y"ohtU
0of2hlXC
HhR#K^Q$
|xgbqN
WSagwD
jFc3r`
'xYLFb0
knr$:Hh
[g1~8l
?;MK<Ag
'bk$q[
h1r##a
E/ek5<
_;s7\=
PbK@|'
gT`GCvz
= \/RC
]3G1=`
mkZe.k
u.W`Nmk
Sl$cme
@^T.eZy
<9n:gs
l<lwd!?kL
XPC%;	
LgZIfH
9VBC3\J
n4ix@W
@]%&Lx\
x_nw"I
RywK	'\
B5N_(<
UmW?>-
I=FTYdu
YOJU9F4
a8LNw&
R?kI%A
LHCV=k
zk(y<	
El<J89B
id.^O/
{G-\Ax
o6b}><
Mv	&y<_
JE0SfR%5
Wr6(]Z
'm|m7M
.;zT4`
.-@]<w
!Kwza<
d=lekEi;]
gQ[arWF
zIw!A?
DopL/-)b
l^^dONx|
ew1	"eU
k-k$sY
	kAZLuI
Enf%ns
]gr0;+i
>lblpoZ
t#S( tV
_d:jYM
,L$3eZk
7BC@vp
]Q2wua
,>c\M/
`B^r4%aRi
w;Cx~b
..I!Gn
_)'fTK
:r/Y%*@
sUeCso
kkY $F
9*,;h>>
N#BH/*
aT[&S'
}nT%~}
FqdQ&^
y3N.`0
^qQ#:{l%&Z 
0VHVSnNY
H|!PN\
qor]g(
=w')$S
8VDl{AOV
v;^|9`J
VZ"[(=
7A<ao!
#S|-"u
[V@m$	
`>|A,WP#
IhG%q8y
mG/RrT
y_?KT}
Ak|S(w;L
N BkEH3
PRfgFk
	a6w0'
40N&;"
Q?"/_,
iL@J>l
2V4_yr3
$v|iZm
SD7	&m'}
g.->Dx
1.{AKV
\'1D.u
>qQbq<vKH
P'M_cp~
;wQ\_:
(iQw$j
Chu'f@
j'xYjy
K"e`7{,V
0R-0$8
Jy7nP{Gebd
PhD$>%k
F@=RHl
/OLZEk
<oC[VR
-TI+vt
K}uNB2
U1Fy o
7|*B9r
DR2vyf
7SDK\B
.2`8Ty
;'a5G1
XU|rQ8
%\vC^P
NhMg4{
/$6^ip`
*%z{H8
Z0's9i:9
:gSl<g
u9+p,1
PF`hEcX;o
|[3q'l