Sample details: e81143ad4f3f6410fbefb7c97226b5c1 --

Hashes
MD5: e81143ad4f3f6410fbefb7c97226b5c1
SHA1: 5f2a5eefcca13129f553cf517c5b335b5828c2c5
SHA256: 725db081b3ea29cab32c2a6f53a04105c7fb80e3d1b0cede566f15afb68bb4a9
SSDEEP: 6144:c/HQ/kMIdLN81JwbQ9zsKboDOkcydUvjmHR:GMIdLN81J8IzsKmOTq
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Basic_v50v60 | YRP/Microsoft_Visual_Basic_v50 | YRP/Microsoft_Visual_Basic_v50_v60 | YRP/Microsoft_Visual_Basic_v50_additional | YRP/Microsoft_Visual_Basic_v50v60_additional | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/SEH__vba | YRP/SEH__vectored |
Source
http://www.centerweb.es/soporte/.eval/en/sys/aj1.exe
http://www.centerweb.es/soporte/.eval/en/sys/aj1.exe
Strings
          	            !This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
Byggeindustriens2
Frugtknives5
qG@|vF
qG@|vF
qGg|vf
(zlmGmmlllqzz
mgghhhGGGmmllqzz|{llmhl(
G@@@@@@gghhGGGmllqzt(Iv5gG
G|||||5
@@gghhGGllsxGvB@@Gl
@vvvvvv|||e5
@@ghGGtw^R^`
vvvvvvvvvvv|||
m@glxx(A
vvvvvvvvvvv||
@ptt(FG
vv&vvvvvvvvvvvvvvv||
qpppIF
(gvvvvvvvvvvvvvvvvvvvv||qqqq
lvvvvvvvvvvvvvvv|vvvvvvvhlmmqG\v5gl(
(|vvvvvvvvvvvvvvGmvvvvv|@
mhh@llggq(
vGzpvvvv@
Gqt\f\\
v|||v|@G
\\\\\FFFFvg5GphFFFB
\\\\\fFFFFFF55
@lmvFF
G\\\\\FAAAAAAFI
\FIlG\\m
h\\\FF
Afv5|vv\FFF\g
I@Glzz|FFFFv
Fv5glzzGvFFFFF\v|vvmx
FFFFFFFFF\sttxtu
<<<<<<<<<<
AFFFFFFF\
xxtpty
AAFFFF
Fvlttpp
AAFFFFF
gGppqmpr
AFFFFF\v5gmmhG(
ceAFFFF\fF
v5gg@t
/ULWVVYcnAAFFF
5JCLMNNNM
|rrf[co
yjyyyyjyyj
QQQQQQyQ
QQvr[zvQ
ovbXvq[fvXM
]ooo'XXh_
114__h_X'@'[
'X__;___@op
0X__;;;;;_or
rvXYbY
;;;^;;;_^`_XXYYQ[[me
A;;A;;^;;`Ia;;XXYQc\sf
oAAAA2232STUV'hXX'o
0hA22;4
DEFGHI;J|Lxx
'33Y56789
*	+,-./
rstuvVw
cdefghijklmn
WXYZ[\]^_`ab
RJKSTU
BCDEFG
789:;<=
,-./012
!"#$%&'()*+
+-E8_d
%35Q/{
Frugtknives5
Skumslukningens8
Medlemskabet6
Billedgalleriers5
Fortroppers
Burgall
Paralyzant0
[k+!HK
\?SPM,
AfC9	j
#x"KEw
b<8]uL
/-_IVk![9
	!Zlf1
}T!*y(
%cZx(d
rFy3oG
js7Y@`\
DaX5$K
]@AX=)
qq)UAI
o8e![]
pg	MLC
vQv5bT4
<SEkT|n
mm`t4'
afKYu`
};#iC,
 r# ]<^#
4|='wDJ[
Rr#it>
D@#12Q
pR{U7d
hv*mm"
\s$Qiw
r)(UEj!/
LI?sls~:
RZ85O\vN
>W*q1Ko
@ OwS'
l]WTTG_
H#37td
8	n#2u
TWe/(xA
#Gw@aW9
(H94Rk
y$|RlR
'M7p_*~I
)z	f[8?
.RB-./
_!;{O|LVs(
TI:9+PR%
>J7D!u
Y=1B-O
N|A+jm
_W.m{r
~ad%td
E-!kz:
t%~k,y
-W0<A1'
kbcW9qI
W0(Kp0
I<Q;^"3A
?r^|}y
%EHj1O
diBEfi
5o' CV
R%<^~&
vmm:y7
)V^q*c?
RJ,S4^
C)B]VF	
yeTPThD
W7hg)M
28s{;=
@sJ&N!]%"
GV1#}\
=uxum|sQ
?':]Vu1
>f,C}JV
%: VVn
0N BH-
8yeE"9
W6q>HJG
aGxztKk<d
t=Yu+u1
$+l>?m
B$<Xg|
Mhty@A6
(1eu9Q=
CX@cr(m
UhD	VjS
Sm?Vu[
_V"`i7
y.'|2n
{Iqz>:h
l)kD@k
`kEf0N(^
VH*tp>
jtPBe0
.9IGW'X{
xF~,~B
CAD$x]C
#|o8"i
6&6OqP
eb|*$3
V.Z)q1@U
jp!h${IP
;Sr$JC!ii
+yn\7^n
pRP$,+[
ygB=tQS
^b)"D=w
:J@8T.
(B|L@H
M1nGjw
4`&)~>
+-Mp5<
`)h%o9J%
+hy#8z;
Y4R	`9
4V$\Ok
|~0kw7
L.T\7@
Gp\4>q
o<Kyl6
s,xA:jPU(
q5	($=H
X'zm(d
NH?CQM'H
AR2\Sz
gl)'M>
g&(,s&5
 >>F	]
 kK$Nn
'x/n=zsB
 08_;_
[,7uG&
~(H@.J
>f a1}
`I|k/xU
d9[@5D
2+	BB^
f^.b!=
]*eB~B
 b;r%D3
mLYHx|~u!G
[-Kq;l
<~]ern
hdbG-)
&	*9	5D
G:3GiE
@|f=P(h
Xb:Nso_
EF&t1t
k^EHl(
-e?Hfo
o{nA.j
`TmzLi
r\x7R8
"2tq~Y
, '!Vb
7kz"le
TCaA[t
k4Lkwb
1p@\l:{M
>c#8R=
Je	MNi
J9b91x
|e.o!%Z
d!S.[|
w7@>@\
9XC{Tw%
Ar-NJ&
3+rb5w
msN'q	;
c+@m/BIJK
zU:_Kj
vm5Cpg&
Jx&5B)
x 3>ax
60EsjLw
hSa==1
^m'mNR
 @Y_v7
s>TC\%
,0_zEB
u$F6,%D
4F+Ls 
ta;&w{
gDsVeu/
-5p	\u\C
$aBKdK"I#
^%?/27CL
cY%E6*
N)I"Kq
)m.;)i
Dr'+j'>
((J	%"
?6lr(z
~5+F#*
'*8z	3v
N2Nh#,
B/#Bur
fsN]:Tp
dH.Qu&S
e)	:{ux?
yFPxcG$
pA<diu
W_TLgeW(V
5>!cA=D
!;rb2Z2
1E?29s4
;2%?`$
ilT9pL
)7z9^\
9EH44nu
CYxY/9*
5'R&D7|
'^a83a
oYMcS`
xg9N41
ijwE2?
28FM,9
A"!e F
=\Ib`~K
g?}d\fmW
uEn@y3
6g62n?:8
,oE0O>
Ikuf2}
	w"G{&
W3yDI*
5q'j+Z
KFQ	txC&
'L4W]K
*Y:ULj`\
Rw8>])
w{52dxI
?}R"A4
u;Ua@V
^7@GHO
JeLD>S
^J#L-b^I
B|o}f|>
^+/\=E
}r?d[R
a]Vx#C[
saERF$
vhhsdg
PUW*-+
. OBCl
d,;$p5
)%T:-4
Hm_.W&
{)9}`,
3c-$JA
H"+KB3
9X QE/
}SC[/$
{6y:		h
gES]e\
G$9sRU
%M5e;]O
~	S:Ni
ulSTht~"
<fVK6+Lx
W:	]e^>
8GK2GXo
LkD4z2&B
&*;q} }
8hceR	.
g}/w:(r
5uzAlkF
%XTY;:t@3
pL~%_)
9hQY4F
<(z,Zoi
9)BS*7
,%9+`G
K]g4^4;oU
g+{^A[
[?y7>6
9j/[RGy
.UsSc8*Q
kervjd
V8U D]
TV3#;	
ewCaT?
tJ@EPYZw
a{I Pu
BPd82Q
dd,9?K0
v)[MXX
='Sp+{ J
3x;{m:
=AKjb;
r}4>ln
Y"h8P8=
:*i+TI
P2&YG;
f$C^j2J
P[93w 7
Rf<Rqj
t7Cb+*
x.H6Q?
`1tbMv
xqr9SN
)cjPy6
 :-N{5
luY	AZ
oTf9`mLn
D^"! &
.|T_d (
SHELL32.DLL
Shell_NotifyIconW
PHeapAlloc
KERNEL32
~3!	~1
0xM^8D!mM
~ONG+/
~YOG++OG+'
Uproduktiviteten
VB5!6&*
Brodkke8
Cichorium5
Byggeindustriens2
Byggeindustriens2
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
Medlemskabet6
Fortroppers
Uproduktiviteten
Paralyzant0
CreateDCA
kernel32
HeapCompact
user32
OffsetRect
WaitMessage
ADVAPI32.DLL
GetSecurityDescriptorOwner
GetTempFileNameA
winmm.dll
midiInGetDevCapsA
ExitWindowsEx
GetMetaRgn
SetConsoleActiveScreenBuffer
FindResourceExA
LeaveCriticalSection
GetSystemDirectoryA
imm32.dll
ImmGetCompositionWindow
SetServiceStatus
CascadeWindows
ActivateKeyboardLayout
ClipCursor
AddVectoredExceptionHandler
CloseWindow
URLencode
VBA6.DLL
__vbaErrorOverflow
__vbaBoolStr
__vbaSetSystemError
__vbaFreeObj
__vbaNew2
__vbaFreeStrList
__vbaHresultCheckObj
__vbaStrI2
__vbaStrCat
__vbaStrMove
__vbaStrCmp
__vbaFreeStr
MSVBVM60.DLL
__vbaStrI2
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaBoolStr
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
+-E8_d
%35Q/{
rstuvVw
cdefghijklmn
WXYZ[\]^_`ab
RJKSTU
BCDEFG
789:;<=
,-./012
!"#$%&'()*+
|rrf[co
yjyyyyjyyj
QQQQQQyQ
QQvr[zvQ
ovbXvq[fvXM
]ooo'XXh_
114__h_X'@'[
'X__;___@op
0X__;;;;;_or
rvXYbY
;;;^;;;_^`_XXYYQ[[me
A;;A;;^;;`Ia;;XXYQc\sf
oAAAA2232STUV'hXX'o
0hA22;4
DEFGHI;J|Lxx
'33Y56789
*	+,-./
qG@|vF
qG@|vF
qGg|vf
(zlmGmmlllqzz
mgghhhGGGmmllqzz|{llmhl(
G@@@@@@gghhGGGmllqzt(Iv5gG
G|||||5
@@gghhGGllsxGvB@@Gl
@vvvvvv|||e5
@@ghGGtw^R^`
vvvvvvvvvvv|||
m@glxx(A
vvvvvvvvvvv||
@ptt(FG
vv&vvvvvvvvvvvvvvv||
qpppIF
(gvvvvvvvvvvvvvvvvvvvv||qqqq
lvvvvvvvvvvvvvvv|vvvvvvvhlmmqG\v5gl(
(|vvvvvvvvvvvvvvGmvvvvv|@
mhh@llggq(
vGzpvvvv@
Gqt\f\\
v|||v|@G
\\\\\FFFFvg5GphFFFB
\\\\\fFFFFFF55
@lmvFF
G\\\\\FAAAAAAFI
\FIlG\\m
h\\\FF
Afv5|vv\FFF\g
I@Glzz|FFFFv
Fv5glzzGvFFFFF\v|vvmx
FFFFFFFFF\sttxtu
<<<<<<<<<<
AFFFFFFF\
xxtpty
AAFFFF
Fvlttpp
AAFFFFF
gGppqmpr
AFFFFF\v5gmmhG(
ceAFFFF\fF
v5gg@t
/ULWVVYcnAAFFF
5JCLMNNNM