Sample details: 64eb40cdc28a9f3b3847eef14c5a174c --

Hashes
MD5: 64eb40cdc28a9f3b3847eef14c5a174c
SHA1: a5d0bbefa872d0cd04ef7e10cca1a43c295ff51a
SHA256: 5f11f17441bfdacd2a530cc1271f30134964544dfb3b166f91dd6923712ae6f2
SSDEEP: 6144:QvpSdu193Te+F+/GxkE0zeN5LHb0GXL6nvizSWzuGoQRwctnsIz:opSqeWm0H7WnwSW6E6ctn
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Studio_NET | YRP/Microsoft_Visual_C_v70_Basic_NET_additional | YRP/Microsoft_Visual_C_Basic_NET | YRP/Microsoft_Visual_Studio_NET_additional | YRP/Microsoft_Visual_C_v70_Basic_NET | YRP/NET_executable_ | YRP/NET_executable | YRP/NETexecutableMicrosoft | YRP/IsPE32 | YRP/IsNET_EXE | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/domain | YRP/IP | YRP/contentis_base64 |
Source
http://michelle777.ru/succex/i/Quotation-Oasis-Projects.exe
http://michelle777.ru/succex/i/Quotation-Oasis-Projects.exe
Strings
		!This program cannot be run in DOS mode.
`.rsrc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
\System.String[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PA
mxfj=ohO
NrN5N^NcNMN:N#NKN
NzNpN+N
N6NHN0N	N$NUNKNCN
N}NUNJN[NtN
N.NqN&N-N.N!NINvN
NCNXNgN
NCN;NvN&NxN
NVNkN2N
N\N`N{NyNNN'NIN;NmNIN$NRN
NkN6NHN3N:N[NLN
N]N%NDN`N,NtNON
NVN	NHN|NKN:N<N
NyNNN6N.NgNcNqN
N3NmNXN3N
NyN'NeN8NxN?NqN	N-N@N)NcNdN-N
NKN)N7NRNCN?N
NnN<N;N
NONzNCN
NMN/N/N
N7N-N%NSN
D>NkN{NeN_N
N9N6N>N N
NkN"NmN9N@NaNON>NpN^NWN3N_NSN2F
DDN<NaNEN{NTNDN
NQN*N!N&NtNkN
N5NyNcN)NEN
NsNtN/NgN	N
N)NzNnNzN^NtN5NDN_N0NDN
N\N,NjN
N+N}N0NCN
NINRN,N+NnNWN
NtN5N_N
NDNMNd
NrNVNbNzN
N*N$NwN
N7NnN N
NYNBN&NwN\N}N
8XN-N1N
N{NdN5N
N^NsN!N&N#N
NqNJN@N	N+N+N^N
NyN7N`N
N<NgNhNDNvN
N>NKNyN
NNNrN|N/NtNMNvN
N^NGNtNaN[N.NoNRN
:sNGNSN
NPNgN)N5N8N	NuNXNBNpN2NFN
N	NoNNNDN
NQNDNMNHN
.sNSN2NzN
NQN,N;N
NdNMNXNuN]N
N-NiN4N
NcNRN+N:NXNrN{NHN"N
2zN%NeNdN1NVNdN
NlNlNbN
HzNyNeN>N"N
NkNwNGN-NyNHNMN)N'N{N
NnNlN.NvNqNuN
NMNWN$NON
2~NHN NYN/N.NdNmN>N!N>N/NTN=N
NtNHNNNlNUNnN5N
-'Yr9m
nq3oqm
R:5SP6
SUou`t /
;2\{@B
pQ$J!LQ
T! 7aK
c5}.hc
]m>3[2
>eH\Pw
ZC`=FqY
e)Vq#8
@0-3y0
I6tLz!
%DU^Y~
xTBO.#
zFi?cA
[ZC~Q`c
c5vXDjGG
Q6#	kjv<"
Y"C$i|
LtwOde
!`3oHz
CJyF[(
m6>qu:G
`4<Cf4
p ?Qwr
ucyKpU
W~UK/P
@Y3Tue
z93'bs
;x$+Y<
N6/ Nd%
m6E~)h
AeT+^&
0<-sjM
="pYx]
<19J|:P
V/kIs~
5+oFM;
	ywmDb2%p
?T\s!?S
DLyT:v
Uq>7.d
!C##NW!	
6UJ rd
,KrPm&
+By(;xtDI
r!8Dn !
	AB"!7
YWc?[6
hce5P!3
#92Ec"
#eO?%($Ko
\w,;$<
qN(CY'
v4!jQ]
*T\T,T
0=Dk%x
Sc//X-wjiH
pAmR9,
G	?C|W
 9_Zp(
'jH.qO
!9ax(Uoi#
z>AAzL
e[z-m~
"q{P(]3
$BN!K3
2[QlC)zI
Em{JV&
g64cE,]
SkysJr
Y"V<t^~3)
}h"SA;
7%::K8
1Fl@4X
"48jg3(
wr2=(9
tb8IiEbx
	b66sG
wRknl.i
jIu]jV
% z]&0
,uCP{g
Y%o=Pt
\=[vHU!
hIIZ+"q
l+5(01
ueh=lw
b48M*> 
J&uoad
n2gIy]~
5>D=cG
tcQ=%o
 #08&[
_E0Xd"/
mtN*#C
1#8^R|
jvQyf7
:Ai[s6*"6
po=Sd/
ZFQcF(H
YG6ZeK
O2/AiX
'%{ix!
k)&!$MZ
N=CV\()
C-cz9g=i
UY|,!}
Ei]vP*B*
};@(#VG
E0~;m]C
g'36Hzsx
v#Ns{6~
D8z)58
vdGU#Z
7TVL)e
Ongy ln
;AH"wHB
m+t90PV
DuDq	5
_z(;3i)
Iq,gNh
?dbTO{~y
_Qm<!MA
JcRjB>g2
MvJwf8	R~)b
KFD+:~
V.q5`y5
KzPDY%
P*'N8HeIY
:?:+;D
3k,@`V+
Co}~P8
10g)w#
]jwW(v
?q!	_G
9Ph86C;L-
;^hIBp
4hv!@1P
~7&ym	
]6.U-Y
&Vb"~>
^}HHjc%
rQA};3
5{dD#.t
isB-*i
qB|KYr]
W#!u7I
bj{O\;Z
diSa_WX
2j&1f6
:DCel-
(7J;g4@
|K3D-,
tN$BGw
m}4,$3
\r6|BN
@"J^ad
IH@rEe
<s~&UZ
V);|=%
PK;<^7
Ew1)`2
k\nUad
}BjZGZ
dOj)LN
"c%qx%
%;X~xP
wy$8f-
artf5;
y_fPa~
]L'z`Z&
|K,eD%
@_jo'n
+VoEwH L
{]y.+vr
uK|@N3
py	KSwZ
7 Go:$.
*0/R>]
dN~Fd,
MKb#]:
]-?0qP
zVN}D2{`
ub\w=H
lfB{si
&1SN5,q
(W$ic 
?o-0j4
f/Xdcov
@ttH<V
!ZGcrs
(98Xw&
(6hiTr
$QJ/3)D63I
((f-91
yOLA@r
F0(X5n
Tr6+c_hek
7Y3P/8
a0Mjkb
}Q,Ks+n
.8>>JHI
w>kbt(
qT/C@]<
tf	_#S
*#jMBop
d`9~N<
 Y+Ny;m$
!:<:R@s
!tW@5z
Y#/s@h
SmC;`D
Zm*u@e
3>EAZ{;
RML3&H
IMJs|P[|>\N
 ('N)j
$5a;S8
Q;T?Ku=
/\)y+8}
Bd#Z7o1
>IrR%Mg
(zhq*`
j:u@rf
JX\(c.Ose
 !YQdd
g7Ga6H
'3t*fX
<tzzTO"
`pPc;>"B@
~6|XBX
E6ECy[
/=;YSgM
>yZ+{V
)a9PJN
~},%}P
8?:/c!J.
_ n5`j%^:I
P1qBADD
%cQV\5
4(V<&y
)9XHjJ
$EL!:p
8:N}d}x)
@nRgd4
+:'p^v
T/"6oI
XA5`N#
:_	IX4
^/6\@}
{`|r):
Sx~-cd.
0h;RJT!
$)[?_p
(%:n-5
zh>g`/
n/Hph25
\ma6H"
iQ`TBP
SV%b,'	o
FrK(`l4
Fp}AIzW
p4Ci;[
f$GSN 
lr}X+F
<Yp;"6
P)9$O=
s<HDrO3
xreITqR)c
*o&7Gl1T*
'7?}Z`
@fB~]PP
')l3Z@'3'
7Q,O!f
$5%F61
o${.+g
fR:lk+
cx$0b	
z2w2|A
q0K7$Mt
hO{-&d8
uS*&y%
lPl	=f
;	({_9
kerGK&
lUP$LLYES
@gV.zh{
]vJpgI
iaCls4
3#e)$\T
Q%Xc`$<
&pXm}"%5
=S'xbF
yiQPpM'	d
jNz3pf
E]QfE@
8	19$sz
vL*[Oh
 Xs2tL
nNL>6i
2f4(,Kjsu
d=[@EG
_+X1"I
}!gX/Z$
J[WC]e~I
I^t]mb
Ln.ZtT&
Ylz|Bch?Q9
Qw=.eN
LL;j6S
(>U*(|d
s-Ojj)
-pZ6l=
km)EvNl&%r
'D8TNI
NxZUE/g5
m@Sp|t
6>{K@j'
|op5<H:
7o?'L 
IioMdD
<w}jQ>
cq8EHTJh
o,CjQ/
Ia}0)]
f}*Im4	8
Wd0F2	
)Dwoq2X
#?oM0D
0ZY),ly
sb\CLH
b	=p>&3q
+;N4Ix
bR#@5^
ti[\R8
=-1B.]T
2iV{'9{
LUqehR
e">W{	ki
",!.5++
E@\dn,
R>'9]y
tzfzvT:
,BOn{j
B}+f?x$
\'7rMK
{i:+3M
P;G'o^
]bLKlR
SJBU&s
[`uM~=
Q0x5$x
+/I8u`
HEi&H1
)6ih~_qCL
?.?`*u~
&eeFw	
YW{B*~
\Q-E5L
C _=+S
?]|t%O
A$Hvc-
\,+&<x
c=|}rZ
18~<O6@
)+/5X!
5E4>`%
4-r/.P
Y$4R]%4
koe,	7
IVzr>>+
b6[9.sa
|c+}?E,
$J,z4.
|}\&S(>y`
B~; S=
s3cBLE
Q<=!fJ
q~g>g2
uc8fDKY^Q
CoXE5=g
)B+'q7
l<5Vj 
zcva6ijO
VtyA.&lR
U<ni[l3)?(9M
uH??g!
tHB1+0
vm$Tjc
Aq,;/3
>}-'T+
v2.0.50727
#Strings
aojQDNdsBu
Quotation-Oasis-Projects
mscorlib
System.Windows.Forms
Microsoft.VisualBasic
.resources
2Db9lHuEGFujUsrfmWQ
hYH9gZBBJiJhIOzu3p
.cctor
4RYpn3HMJNLik
DuOupjEUh2c
Object
System
String
dDlQEdKrMmt2XgOAVX
Xwm3gAnqkC048
G9W488gF1GxtUpQjzw7
ParamArrayAttribute
co302yYHuGPQ
dvluGtmtPr
ugqRggO7Z02
f4KgS1nQnwFoj4EL
TZtMUJIpSU8ZjcWt
kBSRkk0Xid5p4H0v
SAsyl3H77R5ndQ
gvKmEpdfgtn
SqJ1ooNX12x935
OD4KAKYE4Zt
vUecpqThon8hwb3Ks
k32crwMpko0NGpK
xmEG6GgxwaGHJfBwkmg
0wEwUqYvmyX
StringBuilder
System.Text
iuyHCqIqiP
jipwAdQ3kKIS4lWgzno
Exception
xD6BeT0nbPTn
yCWS8aXsP3xuR
GetType
LateBinding
Microsoft.VisualBasic.CompilerServices
LateGet
Append
ToString
GetTypeFromHandle
RuntimeTypeHandle
get_Message
MessageBox
DialogResult
AssemblyProductAttribute
System.Reflection
AssemblyCopyrightAttribute
RuntimeCompatibilityAttribute
System.Runtime.CompilerServices
AssemblyCompanyAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyFileVersionAttribute
AssemblyTitleAttribute
UnverifiableCodeAttribute
System.Security
+-N3NgN5NMNhN>N
NVNkN3N
EDN<NaNEN{NTNDN
NQN*N!N&NtNkN
N5NyNcN)NEN
NsNtN/NgN	N
NyN'NeN8NxN?NqN	N-N@N)NcNdN-N
/sNSN2NzN
NQN,N;N
NdNMNXNuN]N
N-NiN4N
GUzvOXPehW7w3
ep3qBUMxOBWDx
WrapNonExceptionThrows
jizMp6aFegurO
WtzHKAYUDvuhi
38.97.100.90
rwF32fxI92T8r
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
_CorExeMain
mscoree.dll
IDATx^
bZIwR_
eI4b49
!rlDhx
`q[$l[
oK	S4n
Z1&ttK
2;Yt{,w
r$>8Li
OcU-Ae\"Rq
(;7&z)N9
G}EdH})
}3uVCK=_
X@Ar,Zc/
objA)[
(MmZ	3
A)z|/wT
+q<	iM%
`$i;L@
zsiF)O
pT\]ip
[$y=v~
3N03pQ
WV'Ykv
.Q^tAv8Y
rIUre3@
S-fa%`
ow4V36
* ALutk
)3 Qji
	s-An^F
~`twf:
BrB&!w
,_PnyO
:sRp^v
m6=m6$
3_%Z$W
F;K:(ya^
7~.]&=
AHi xZ
eyYmJ'
W3p"ZQ(3
THBxCK
ou4j9n
II<TO5
\P9<$e
);.JJD
s&0Lh<
?]<0!u
ADFnz8
2boSSV
'a>E_$
7Jr;,5i 
d0w${2
:VhN4U
x>Q-e5}/
+}'i+vNoQ
m?4%u#
g]Y]>M
iJNg m
	X]o3f
:<qW3|h
\5:!Y~
:	kD$'H
b`u(ST
ix|Q(w
c?^]B8
9Oh=Gd
L	'?U?
UJP`#y
q-qNOh
uM.}	[
U&vcl;F
7?p8BG
K17vm;
Vcyv	u
/eC=,!&
qG'cg`8]
R|y`4l
:()aV<
hA2yd^
aA.&.FT
yj]qUK
>y+V4}
Xg!+[I=DE
NcnW(]
ef~D?|
)%oN' 
|Tm]b7
gtb.R"
Joz,TV
1[>@,o)
E,te} 
rt;%w?
$nVoEyt
ap)TB1
CI+@SV
{v/Z{]
J0~Mj#
}7L;P=<l
gcMDN5
V7vs"b
<0sW9(<
][OZ.X2
t@$d&,*>L
wh"|%E
kERWqL
UbVJB<
rtI[0CT
0mSB1A
BLG62F
URT9R[>*
X		505
oVc}y!h
=Bk\mt
f8:5~,
Ib_64#
Ww@h$g
O,C-D}
tMpc@tG
~N_,XL
EZcIkt8
X}Z^$X
f'*ms+
k	drTU
-Fq$j)
hf#<QE-
TFMlt	 
-!TLQ5
pnp#0m
p\-yXz
EKm^2Ht]Ic
'/4{Q2
^,wiUe
tH5JjY
KMJdl%U
+94SoR
&U? #`+av
B+r^kR
WM60e"qS@
\{OIkr
=)-Ig~
)6D^`M
FSifplN
`5`Mff
oRHy+fx
D-0%b]
tz!}X/
u(jgd<<!
/fzNQ*X
/jA^_nq
X597z|
jU"^:;
mn!H$O<+
w-P^b^
O^c=cbW
v`H X~
5Ok-"&Fm
p=YE41Q(
5,%n$j
!N	AN8
6}"Hl\
5:;*sg
ut:d07
t`v<l-
B&-PaOp
t'k	:~
pAa80X
N1^~R0
"$K:Rd;`
gZlr\W
Pvyvg HBl
:	?pB'
np5Fl&
W\d+tkd6
u G5cC9
.v=K4a
d.{JOG
Cp	*x:
X<~w|aa
t3]s8X
_=LpEr
1^.GvoA{
rm9<-#
0V\=	y
PT^e?-
Sta'51
a|6}{['
9gXJ^l
Y<5_*R
kB!kid
lb;RGa
hl%eE74
I8>=>R
Af+u(+
E`.v[bA
r3h,LsU{
q-L]6U
9r.VJQ
8-$+qG5
fqsrmJE
yn4ha:zRZ	
{rn8w+
n^CC`;
O&]~aq`
=RX@!a
~tTtCB
UA555^
pJ ixM
3[wq40p4
Q8)X~h
-R[LZl
": Fcs
9T	zpM
#H}1vb|
	rkK_tL
OI k~G
=zGr4F
<OoS:a	
ESL?iV
xXt)	T
S]Tp[mc
VUkC;d]
pn;wpc[
E Y,zW
@S4CG|
!khlbw
}+cZi<
^m6L#n,b
p?$Zh9
Vq=2XOH
3c<2hM
,><MsQ
7k\ws;Z
0iA74&
`(wxNw
}1CS|>
3?o y:
T.Wzvy
	g]whG
dds)4*
)*(}#1
kX<8u4
cZjcHJR
KqT/<D
(IO^m!
:'ljcG
bIB#."66
>i{%;"
|RTw;t
uN?j!X
nZ.20-
Xv|>]u
4iCf&|
*=CbMi#
qODi;9z
s#`U]o
^/s?lN
ueVeii
uMemu,
an\QLL
?DP6?F
]z|khl!G
Dr'R2w+
b @5'MWML
ldx'?HA/T
FRyd+]
(0"1u_
0t33{"
dqFTu$
5q#K\\Y'S
W5e!36
0!vX7J
yqXE$>
OQoNMRc
2F)?CL_0N-s
3I_2o'
H_+~R=?7
,0~B>"
H`{]YtI.
UW0-9v
c4'O.*
3HI}r7?M
5Pv	tmG
UGl!.6
#K-fwSb
Gr#Ia!
2*7L9!
kl%dzv
p)RG ul
I'O:w!