Sample details: 6d41c23c21f74b641ef70dc2deb4dd79 --

Hashes
MD5: 6d41c23c21f74b641ef70dc2deb4dd79
SHA1: b925d27b0e06d5ec3ca34dca7180b7ee38528647
SHA256: 0fe7fdc7e79d789fa9259b73683b4a5f007cd24ed4bfb186475b423ce00d67fd
SSDEEP: 6144:Vx8qKiWeUzYRDm8qiexh70TkWs6YjMUfOUQs1+pk0mK2w6ZJQiD+aGQR3gNuyUwc:LFqHh7zfiiD+apgNBU3mfR0Trsy2e
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Basic_v50v60 | YRP/Microsoft_Visual_Basic_v50 | YRP/Microsoft_Visual_Basic_v50_v60 | YRP/Microsoft_Visual_Basic_v50_additional | YRP/Microsoft_Visual_Basic_v50v60_additional | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/SEH__vba |
Strings
		!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
OCCUPYOffseason
OCCUPYMastigopod5
OCCUPYTHROMBOTIC4
OCCUPYTHROMBOTIC4
Timer3
OCCUPYservaline8
OCCUPYFoldure
OCCUPYCascrom6
OCCUPYGRAMMARIANS
OCCUPYBellingham
OCCUPYDYSCHROIA8
OCCUPYHAZLETT
OCCUPYprofessions
OCCUPYPUZZLEHEAD
OCCUPYINSTIGATRIX3
OCCUPYNABALITE8
OCCUPYSUPERINCOMPREHENSIBLY8
OCCUPYunmellowed6
OCCUPYLymphogenic4
OCCUPYCatelectrode9
OCCUPYPROCEREAL5
OCCUPYqueasy6
VB5!6&*
OCCUPYorohydrographic
OCCUPYMeddlesomely10
OCCUPYOffseason
OCCUPYOffseason
OCCUPYMastigopod5
OCCUPYowerword3
OCCUPYimplead1
OCCUPYGRAMMARIANS
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
OCCUPYDYSCHROIA8
OCCUPYSUPERINCOMPREHENSIBLY8
OCCUPYLymphogenic4
OCCUPYINSTIGATRIX3
OCCUPYFoldure
OCCUPYprofessions
Timer3
OCCUPYservaline8
OCCUPYPROCEREAL5
user32.dll
OCCUPYthills
OCCUPYMastigopod50
OCCUPYMastigopod51
OCCUPYMastigopod52
OCCUPYMastigopod53
VBA6.DLL
OCCUPYimplead1
OCCUPYlatticed8
OCCUPYlatticed8
OCCUPYowerword3
OCCUPYMoyenage5
Eqtle;
T7Jj>3
y	:Y<:
K4L?jF
EDu$/m
>=S1,%
 5l&_I}
Y8QVea
r1ycb\
 c-t!Z4g
Y<MVIa
`qX6db
u?z.d=
9m=SCT]YX
P=%_D6
M	A>yMc
iY<9j	]o
*Z_w%=
91-5`]
Aqt_sl
mIqlAL
?>*s0%N|
&i,,'D
L]T}\J
yG0t<mD
-}5=~[
G0t<z.x=
EV_05x
ax5lnhK
Q<tlDo0
tpyc5^
J|PB|wM	h
E92?8S
y |Eo#
YqhBz\6
9a#q4g
@AV9a+
1)U@Y<
G0t<z.
|5lz.T>
sCT%YX
	m=SCT%YX
09Z=[/
y}9Y<\\
p(T47J
`91QTx&}
c-l!Z4
h|S&GoY
EDuQE!
y sq$a
	7C<?g
jztp4R^
%K6db"
l9"t]o
 `F1R7
t\&QfQ@
$:z.T>
mIqlAL
uVP%v-
mIqlAL
wn<:B)]=
9xz.@>
@&Z4i+
M	nY,E	
FKwgCI
}	$VFW'
plp[6<
09Z=[/
mIqlAL
wj>:B)]=
Y;qA^9
T%8 #q5g
iRXLLP
FKw{Ca
mIqlAL
=:B)]=
	7C<Sg
-Vstlz.
QZL'6?
lbdr4yJ5)
 B,tYL
m}plAB
u+5lmHO
cjj8FU
Q(w+Dg
)A!qtl
$ba#HdgJ
dqtls~
l4 B,t
R"\sX[
Z=DxZ4
y=E.|;
=m=SC\
\EAstlz.
hEz=--
h!\L)P
AJL]n	v1l
v6H*wqL
&9Cq[1d
09Z=[~5
	id"b^
iRcm]0t
2/t%L]
=0ulMz
H,Aky{\
q5%"dV
CPtU4B
fl+o|S
ml__}W
44i>Jq&
p5	P#a
JKl^!s
mjJ^9i
DL;bzFV
~zk[,!
xh.3/*
i%Zwfa
Wd	m,4U
NA9B=9
zH%o|A
bzDu-~
;5e;_|!
h^kTB(
2qqQeV
Lm_f=L
fE1eh7$
LGj=<Z
L^}=Ym
0riQeV
~{Jo=H
M_jTB(
xzkB+3
h^kTB(
ipOBB(
-As@	,
azGl}T
ULvm2nT
B\'fRBc
YDA5RRy
\_oF4B
%d~B"&
i6[nx1
WYw"-R8U
wCIo|l
Z2=k)fp
 -_V2>ES
iC2u}YE
G7d.s8
+|/XdQ
o.I==h
c7f@bv
kiNvEF
ivD3>x2
Csb(uk
v!C1*SF
RHKb\Gt
o &u><
OzF}r^
iEeYc.
x&1Ed_
BH2 xks
.|O-\m
BJtg?`
`pr@"4n
>`&H3:
SW!'#}
i~NoYq
I 3;l^
zx/.dp1
De-:C$
KGu1g`9
+%MpIx
y@PV/@
a(0'ki
I4H7^{
y}e#Ff
8	\N_5
{j{9;3
GG^:zv
~n0.'7
tzZMY7
}v]joi
dOT2ul
$A	,oc
fD9LI7
TZJJWp
v-d40y
{h)	joK
	iPQhA
edp7]+Q
hNO-2-
,R~*K%
h>mR}V
sd]F'rO
x3SXFt
->dY$!
6] W>-
1h8`EHT
0;TJ`_4yQ
ui	 ,4
q.6cx+
gFLzjJ
ii92/t
6xMH#+
,:87\l
9E,ZR8uYK
NSLqFi?
n}<Z09
Qm-OG/
6mFfvX*
-UrPgC
|hOMtF
6]sa:\
b9q!f\
h0tR9Z
};}U5U
G8ugWm
T,^/km
9A1PW4>
?*A dk5
AhLLnx
"ot>w.w
4qb2zW
~W;IA`J
}}^PA07
O"UC~yp
lU=*?@
kE[@Zm
88&^iT
]s4vvpy
0"tG[R
TVE,V!
c}5@}:a
{q1IfU
Zv&964
Ck#AeQ
2A;H/{m(
6/+*BRP
lfA.t#
r?l4XZH
_mF849
9Z.jxe
[|[d:e
6TC]^3
y3L:iC
CC8_|l
F,'r3G
5)Ig <
QmGR9Y
)/^Hv!`/
2<s{4z
W93I2;
Y~;},|
E$)\|-I
Chfs.Y
l`@O/'
n-ns]e
cR!)A.
DUu7"9R
wRD:jR
'a@	mh
*0[H4@
p:TCZ_
&T\:8%CjpG
]^-0vJ)
SC|]YE
%U|[[C
-------
aa-----------
aaaaaa---------
LLaLLLLaaaa--------
LLLOLLLLLLLaaa-------
LLLLLL-p8----
@2Oppp
7(```...
sssh````..ug{
Nvv2|pp
`q1^^^^^^m>````
>'	GGz
````;3
>>>>>>>G	
X#|n--
	qq		!!!!!	zAq
>!!!!::::!)
!!!:::::!
!!:::::::AF
j		;;``..
:::***:
:*****
'''``..
%Je;;;``..
mcMllMc
:::?444Rh>''`
!!!>>>
OCCUPYMoyenage5
MSVBVM60.DLL
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
-------
aa-----------
aaaaaa---------
LLaLLLLaaaa--------
LLLOLLLLLLLaaa-------
LLLLLL-p8----
@2Oppp
7(```...
sssh````..ug{
Nvv2|pp
`q1^^^^^^m>````
>'	GGz
````;3
>>>>>>>G	
X#|n--
	qq		!!!!!	zAq
>!!!!::::!)
!!!:::::!
!!:::::::AF
j		;;``..
:::***:
:*****
'''``..
%Je;;;``..
mcMllMc
:::?444Rh>''`
!!!>>>