

Section loaded: C:\Windows \SysWOW64\ msvbvm60.d ll Parts of this applications are using VB runtime library 6.0 (Probably coded in Visual Basic) text IMAGE _SCN_MEM_E XECUTE, IM AGE_SCN_CN T_CODE, IM AGE_SCN_ME M_READ text section and no other executable section Static PE information: LOCAL_SYMS _STRIPPED, 32BIT_MAC HINE, EXEC UTABLE_IMA GE, LINE_N UMS_STRIPP ED, RELOCS _STRIPPEDĬlassification label: mal100.ran s.troj.eva file has an executable. Sample file is different than original file name gathered from version info Static PE information: Resource n ame: RT_IC ON type: G LS_BINARY_ LSB_FIRST

Icon embedded in PE file: bad icon m atch: 2004 7c7c70f0e0 04
