x22 Free?

[detoxN]

wieso der thread ersteller bin ich jungs?!?!

ich hab damit nichts am hut
deswegenn frage ich euch was ihr davon haltet

[<~Engel~>]

Naja ist zu 100% Schadsoftware.
Den das Teil hier wurde in Visual Basic 6 geschrieben. Und der Orginale x22 ist in C++ geschrieben.

TrID:
Win32 Executable Microsoft Visual Basic 6 (90.9%)
Win32 Executable Generic (6.1%)
Generic Win/DOS Executable (1.4%)
DOS Executable Generic (1.4%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)

Dann die "richtigen Daten der Datei...

sigcheck:
publisher....: rYsxFv
copyright....: sIYR
product......: leNvySvzNJtG
description..: mJE
original name: nfduz8hr5z0_45zsdfg.exe
internal name: nfduz8hr5z0_45zsdfg
file version.: 5.18.0021
comments.....: LMKPnuBf
signers......: -
signing date.: -
verified.....: Unsigned

Dann die ganzen eigenartigen Imports...

PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x1EC8
timedatestamp....: 0x4C6C195B (Wed Aug 18 17:33:15 2010)
machinetype......: 0x14C (Intel I386)

[[ 40 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x3A2F0, 0x3B000, 5.72, d2465d47fdf6dfb455bd617ab9cb0ab7
.data, 0x3C000, 0x3DF0, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.rsrc, 0x40000, 0xE28, 0x1000, 4.34, 0a501e7755f53c2987065be7ef174fd7
.I__fVR , 0x41000, 0x139000, 0x139000, 7.1, f563ceef359ea5789535a2b58ded9b3f
.CLqS$7 , 0x17A000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.D_zT1W , 0x17B000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.2cd_H , 0x17C000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.SJ_O3S , 0x17D000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.S__EpH , 0x17E000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.Il_nQS , 0x17F000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.7Gi9vD , 0x180000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.__y@E2 , 0x181000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.XnPYiC , 0x182000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.ME3$lN , 0x183000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.0_iAsN , 0x184000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.QVGY1Y , 0x185000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.F6U5U9 , 0x186000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.G$3_iY , 0x187000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.5TITHJ , 0x188000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.U4M_mT , 0x189000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.V1VcUI , 0x18A000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.KR9F@T , 0x18B000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.92onWE , 0x18C000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.y x3_3 , 0x18D000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.ZObaJE , 0x18E000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.PZ@YOP , 0x18F000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
._p_P7o , 0x190000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.vM_ Bz , 0x191000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.kXZK_A , 0x192000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
._rckz@ , 0x193000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
._KM9_k , 0x194000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
._V1f0v , 0x195000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.ceA_r$ , 0x196000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
._IOUN_ , 0x197000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.1_XuWp , 0x198000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.rkBJB@ , 0x199000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.gFGpf@ , 0x19A000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.H_P_OW , 0x19B000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.6i3E__ , 0x19C000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110
.vDh_P$ , 0x19D000, 0x1000, 0x1000, 0.0, 620f0b67a91f7f74151bc5be745b7110

[[ 1 import(s) ]]
msvbvm60.dll: __vbaR8FixI4, __vbaVarSub, __vbaVarTstGt, __vbaStrI2, _CIcos, _adj_fptan, __vbaVarMove, __vbaVarVargNofree, __vbaAryMove, __vbaFreeVar, -, __vbaStrVarMove, __vbaLenBstr, __vbaPut3, __vbaFreeVarList, __vbaEnd, _adj_fdiv_m64, __vbaRaiseEvent, __vbaFreeObjList, -, __vbaStrErrVarCopy, -, _adj_fprem1, -, __vbaRecAnsiToUni, __vbaCopyBytes, __vbaStrCat, __vbaLsetFixstr, __vbaSetSystemError, __vbaHresultCheckObj, __vbaLenVar, -, _adj_fdiv_m32, __vbaAryVar, -, __vbaAryDestruct, __vbaVarIndexLoadRefLock, __vbaVarForInit, __vbaExitProc, -, __vbaStrLike, __vbaOnError, __vbaObjSet, _adj_fdiv_m16i, __vbaObjSetAddref, _adj_fdivr_m16i, __vbaVarIndexLoad, -, __vbaBoolVar, __vbaStrFixstr, __vbaBoolVarNull, __vbaRefVarAry, _CIsin, -, __vbaErase, -, __vbaVarZero, -, __vbaChkstk, __vbaFileClose, -, EVENT_SINK_AddRef, -, __vbaGenerateBoundsError, __vbaGet3, -, __vbaStrCmp, __vbaVarTstEq, __vbaAryConstruct2, __vbaObjVar, __vbaI2I4, DllFunctionCall, __vbaCastObjVar, __vbaLbound, __vbaRedimPreserve, _adj_fpatan, __vbaFixstrConstruct, __vbaLateIdCallLd, __vbaRedim, __vbaUI1ErrVar, __vbaRecUniToAnsi, EVENT_SINK_Release, -, __vbaUI1I2, -, _CIsqrt, EVENT_SINK_QueryInterface, -, __vbaUI1I4, __vbaStr2Vec, __vbaExceptHandler, -, __vbaInputFile, __vbaStrToUnicode, -, -, _adj_fprem, _adj_fdivr_m64, -, -, -, __vbaFPException, -, __vbaInStrVar, __vbaStrVarVal, __vbaUbound, __vbaVarCat, __vbaLsetFixstrFree, __vbaI2Var, -, -, -, _CIlog, __vbaErrorOverflow, __vbaFileOpen, -, -, __vbaVar2Vec, __vbaInStr, __vbaNew2, __vbaR8Str, _adj_fdiv_m32i, _adj_fdivr_m32i, -, __vbaStrCopy, -, __vbaFreeStrList, __vbaDerefAry1, _adj_fdivr_m32, _adj_fdiv_r, -, -, -, __vbaVarTstNe, __vbaI4Var, __vbaAryLock, __vbaVarAdd, __vbaStrToAnsi, __vbaVarDup, __vbaVarTstGe, __vbaVarCopy, __vbaFpI4, -, __vbaLateMemCallLd, -, _CIatan, __vbaAryCopy, -, __vbaStrMove, __vbaStrVarCopy, __vbaR8IntI4, _allmul, __vbaLateIdSt, _CItan, __vbaFPInt, __vbaAryUnlock, __vbaUI1Var, __vbaVarForNext, _CIexp, __vbaI4ErrVar, -, __vbaFreeObj, __vbaFreeStr, -

[Gamok]

DL in "BESCHREBUNG"! (: