Sample details: c30b28bb996032492725ea9782724baa --

Hashes
MD5: c30b28bb996032492725ea9782724baa
SHA1: dff6fc80b3d0a6862332a2c359d5a151746ae6c9
SHA256: 3a51eb4e3b0be0fd50363c315034e76bfbdc34df9d5d5fdeefa54fe2d583b686
SSDEEP: 6144:dDCiPKgSAKxvKsYxCGwACPPUqL+/1+t62v5EoXwsRCn:YjyKxvKsYEoCPMy+/52E
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Basic_v50v60 | YRP/Microsoft_Visual_Basic_v50 | YRP/Microsoft_Visual_Basic_v50_v60 | YRP/Microsoft_Visual_Basic_v50_additional | YRP/Microsoft_Visual_Basic_v50v60_additional | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/SEH__vba | YRP/SEH__vectored |
Source
http://www.centerweb.es/soporte/.eval/en/sys/aapfb.exe
http://www.centerweb.es/soporte/.eval/en/sys/aapfb.exe
Strings
          	            !This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
hedensMassemedies
Milieumyndighedens
Yndlingsbeskftigelse
qG@|vF
{qGg|v
(zlmGmmlllqzz
mgghhhGGGmmllqzzp{llmhl(
G@@@@@@gghhGGGmllqzt(Iv5gG
G|||||5
@@gghhGGllsxGvB@@Gl
@vvvvvv||||5
@ghGGtw^R^`
vvvvvvvvvvv|||
@@glxx(A
|vvvvvvvvvvvvvvv||
@ptt(FG
vvvvvvvvvvvvvvvvvv||
(gvvvvvvvvvvvvvvvvvvvv||q7qq
lvvvvvvvvvvvvvvv|vvvvvvvhlmmqG\v5gl(
(|vvvvvvvvvvvvvvGmvvvvv|@
mhh@llgg
vGzpvvvv@
\\fFgGqt\f\
v|||v|@G
\\\\\FFFFvg5GphFFFB
\\\\\fFFFFFF55p@lmvFF
G\\\\\FAAAAAAFI
\FIlG\\m
h\\\FF
Afv5|vv\FFF\g
I@GVzz|FFFFv
Fv5glzzGvFFFFF\v|vvmx
<<<<<@
FFFFFFFFF\sttxtu
<<<<<<<<<<
AFFFFFFF\txxtpty
FFFvlttppqx
AAFFFFF
gGppqmpr
AFFFFF\v5gmmhG(
ceAFFFF\fF
v5gg@t
/ULWVVYc
5JCLMNNNM
|rrf[co
yjyyyyjyyj
QQQQQQyQ
ovbXvq[fvXM
]ooo'XXh
114__h_X'@'[
'X__;___@op
0X__;;;;;_or
rvXYbY
B;;;;;^;;;_^`_XXYYQ[[me
A;;A;;^;;`Ia;;XXYQc\sf
oAAAA2232STUV'hXX'o
0hA22;4
DEFGHI;J|Lxx
'33Y56789
*	+,-./
rstuvVwxy
cdefghijklmn
WXYZ[\]^_`ab
RJKSTU
9BCDEFG
789:;<=
,-./012345
!"#$%&'(
+-E8_d
%35Q/{
Yndlingsbeskftigelse
Buras2
Commercials
Flaskende
Ravine0
Pupates6
Tegnedatabase
S~p?:R`h
HL"0/Zsf4
##+aoN
:'ao~BUX
.]QWya
+idQq+
DUO#Km
a`0qOd{3
f_\fUn
nq]= p
pPm}:r
L+z]Z2y
8&]pBM
Ma$,4E 
b<[0dm
NV.QPw
*?:_B,
9L]'M5
Bc,"w!
e4kL\"
Au7JT\.GE
CuqR%C~
t{oZW).
s*qq@X
-; U]@l
\],cJb
dJrXC5
oiGIn%l
yzRB?P
whO/$.	
Vrb1QE#
QNSmr]
*qf;K0`
#1E=Lu
4z{}+Y
hq]X *
 l}xk]
V+):kP
9._{p|
7]MQ9a
;^xM3l
@dP#3u
ob:"eX!
%NU#sGq,
P6?{5cps
9&07i_[
vFY	J;
+8bCjoVqWv
=zVZ$.8
c{X;h`# 
rAf3w-1S
"g=K/q
wqS9@.tt
ZAhzSMJ
C9V!}=
`Y[{{[
Z:J:G=
Kxr&g}4
on7,lM/
qFf9[Z
Z{!Hgh-
[k:=V<
j5%xEZ
@ZF&Ne
lAoTES
	sf'_3K^
c8Sbt\-H
|	J=u2
-I*Gd0
lfR)!)
rY9H6_
iq)	HR
INFnw1D
"chJ*u
\yb'3+>IQ
,86Y$f
`VFi?8
)^n d.
{TboTv
iNo]5ysRf
5smlBwj
2%@To*/Q
K1!c0*
o<T%\<!O
Ru"K_K
n~x]Ll
]8sJoC
G2G0tv
-nH_"v
XJIc_Wm
\~x.TF
Qf1cI@.
,?qQ.'
x")deC
[I! h$<)
lot+d6X
_rOn*V
Q6s(Y'
!%IJq#
t@-?Q')
r]<=f)
2|[kPt
|:o^	R
:[+t_TK
+4Ec~||
elA3/L_
#Qb" >j
q@%%5P
W7s=!/
JfC$ra(
AC:c<C/$
Vr{q-9
%"1Ye@G5
?XT5=b,
7fuCww
5tarKb
Sh0drY
VE $aqa
W	L:+Y
bK{s-5w 
&vN[@]
`5 |)as
2:U3T/
@r\)rH
C,1s$C
KSH:yV
WR? "r
fkicl0 L}
e/}*FU
W63}]e
jAC<GN
OWv2PN
\w@b/n
`I\9Q6/
uB|p.V
i2&'/D
ChN>=i
TYy>[I
I4Oo}|
9<'lNV
.Gl9-Zi
WojX#S
au	L?U
 "!7_-
RaVh I
ffr1$=bc
}Ey:>\
0H.[2~
&'tK+U
!JL,]j
ncG~P>
X>$OPS
N8;S3%%
th3/Gs
Fs9E+CD(
*qYwb{
`zp,ih
O"6qrc
@CCX\(
I}[g9?
sKLt$k
9^"RF,
{o	wB/
dwP(}+
\[)l%R
ilSBh+
F_!J/h
fiXlS-
:m/XI9
4H1 sg
1"eJ(k
o$q_4X
!$BSY?
c22tJG
)Br;qI
m4Hc/>
5lx"wpC
>a=	-i
xXZ2\e
`kgAl5
<}h|,0T
2x@ZPtDS
B)jb(y
|cB+omUPI
XnQ!-|
E9X.`M
d~lR,p
{jc>4/	
" l2<D
T>Ixq2@t
37B,qTW
%~kdj6N7y
j!Prp{
V&0R:1
2H\Bsx
(67BKB#
AoBER>
/NN,O1
SBifAYU
yRMwcyi
N*3bS'
wcxGHm5
eN*KSb
{S`INZ
Umc,KK[
Z*	4%D
[lVTO}B=	~ 
^k"CZ)
l(d;iE
x5HPE"
>G#<o\S
U^MM?B
`*(m@p
.=Wcab
z"_!*B
 v}U>ezd|
c}jb0}
I	B#p>
qF-oA%
BIPtlt
]~k#@.
ee9-3L#
tQZcgL
j_COHT
	>8Ec5
Ajqy;J.Q
Wu,jaA
0Jx0VR
[;0A>zH
{&`I)4d
F!9-uX
	UyzW(
xW4YaW
!&3$?W
;Lp)5&
iLy;X&*NC
x!O`gr
d4Sr~9
%~|c#m
WbB=>Y
V;z|.jip
K/K?O-{
xNGEDs
h%;[7=
ixL3YB
kwnCY$
'DP,'l
hxrxhJQ
6H2M}FNhl
k%}T;?
x$8rMI
Iagx"BVus	Q
w(%N%H
=):Jbd
LuWPy"
_z~9v/9
Rk#=uv
i^,\=!
2\SSH 
%mZ8wc
t9?H~6
KxxcH%V
Ji$`u1
zCx\zj"
I}EYQ*u
0W\CuL
7(hwK}
axRdA{
((Q*Kv
ePALC}1=
Viwmwt
|(L"$j
whZdd+
-t>E&s{
b?GZ0o
y(M>eE>V
 1|^4}
J;!Sxt
Giy"2'
s/f1Nv
\b&k2;
)plp8,
pAO(S+}
1U.}&-
+hp.Aj9
rV8e.Ol
^XN*Ai
_U%VLK
T,>eQB
:'PT_I
XAI+Bc
@(7:_o
FA1s%Lf3
&Jr2N(
!.o<^<?K
6Z(IuD
\=hlqV#
k.i>~H
8`6O'<
-#{ah.0/<
TIR-L:
\xh\0b4@
{ ?Sw7
*-I(-Q
gT5@x=
<lQ0Wl
hWc:Ss
SHELL32.DLL
Shell_NotifyIconW
PHeapAlloc
KERNEL32
W0F:vhB
U8*;euB
U8.Z$x
W02:7mB
#*ZP$}MVj~B
4$P%}?nW2R
W02:OrB
yIiU9I
}BP%}6
Thymolate
Undergangsstemninger4
VB5!6&*
Dephlegm1
Smregravenes0
Massemedies
Massemedies
Milieumyndighedens
Thymolate
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
Tegnedatabase
Commercials
Ravine0
Buras2
CreateDCA
kernel32
HeapCompact
user32
OffsetRect
WaitMessage
ADVAPI32.DLL
GetSecurityDescriptorOwner
FindResourceExA
GetTempFileNameA
winmm.dll
midiInGetDevCapsA
ExitWindowsEx
GetMetaRgn
SetConsoleActiveScreenBuffer
VBA6.DLL
GetSystemDirectoryA
imm32.dll
ImmGetCompositionWindow
SetServiceStatus
CascadeWindows
ActivateKeyboardLayout
LeaveCriticalSection
ClipCursor
AddVectoredExceptionHandler
CloseWindow
URLencode
__vbaErrorOverflow
__vbaBoolStr
__vbaSetSystemError
__vbaFreeObj
__vbaNew2
__vbaFreeStrList
__vbaHresultCheckObj
__vbaStrI2
__vbaStrCat
__vbaStrMove
__vbaStrCmp
__vbaFreeStr
MSVBVM60.DLL
__vbaStrI2
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaBoolStr
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
+-E8_d
%35Q/{
rstuvVwxy
cdefghijklmn
WXYZ[\]^_`ab
RJKSTU
9BCDEFG
789:;<=
,-./012345
!"#$%&'(
|rrf[co
yjyyyyjyyj
QQQQQQyQ
ovbXvq[fvXM
]ooo'XXh
114__h_X'@'[
'X__;___@op
0X__;;;;;_or
rvXYbY
B;;;;;^;;;_^`_XXYYQ[[me
A;;A;;^;;`Ia;;XXYQc\sf
oAAAA2232STUV'hXX'o
0hA22;4
DEFGHI;J|Lxx
'33Y56789
*	+,-./
qG@|vF
{qGg|v
(zlmGmmlllqzz
mgghhhGGGmmllqzzp{llmhl(
G@@@@@@gghhGGGmllqzt(Iv5gG
G|||||5
@@gghhGGllsxGvB@@Gl
@vvvvvv||||5
@ghGGtw^R^`
vvvvvvvvvvv|||
@@glxx(A
|vvvvvvvvvvvvvvv||
@ptt(FG
vvvvvvvvvvvvvvvvvv||
(gvvvvvvvvvvvvvvvvvvvv||q7qq
lvvvvvvvvvvvvvvv|vvvvvvvhlmmqG\v5gl(
(|vvvvvvvvvvvvvvGmvvvvv|@
mhh@llgg
vGzpvvvv@
\\fFgGqt\f\
v|||v|@G
\\\\\FFFFvg5GphFFFB
\\\\\fFFFFFF55p@lmvFF
G\\\\\FAAAAAAFI
\FIlG\\m
h\\\FF
Afv5|vv\FFF\g
I@GVzz|FFFFv
Fv5glzzGvFFFFF\v|vvmx
<<<<<@
FFFFFFFFF\sttxtu
<<<<<<<<<<
AFFFFFFF\txxtpty
FFFvlttppqx
AAFFFFF
gGppqmpr
AFFFFF\v5gmmhG(
ceAFFFF\fF
v5gg@t
/ULWVVYc
5JCLMNNNM