Packed MD5 330eaa2da283d40c248c28d82bb0af6b 
Priority
First 10/02/2009 
Last 02/01/2010 
Count  
History  
Unpacked MD5  
AV Hits 28 
AV Count 32 
CC Servers  
DNS Lookups EU:siliconfireware.ru US:searchportal.information.com US:spi.domainsponsor.com DE:siliconfireware.ru GB:welcome3.smile.co.uk :wpad RU:www.bbin.ru 
Failed Connects RU:195.200.213.54:80 GB:195.92.84.198:80 US:204.13.161.51:80 EU:78.47.200.154:80 
AV Name AhnLab-V3:IRCBot.variant, AntiVir:Padobot.AA, Authentium:NetCN, Avast:MISSED, AVG:Generic.LW, BitDefender:Generic.Malware.SFWX!V.31FE4F10, CAT-QuickHeal:I-Padobot.aa, ClamAV:Padobot-16, DrWeb:MulDrop.3529, eSafe:Padobot.aa, eTrust-Vet:Berkor.B, Ewido:Padobot.aa, FileAdvisor:MISSED, Fortinet:Multidr.BEK!tr, F-Prot:NetCN, F-Secure:MISSED, Ikarus:Trojan-Downloader.Small.AIP, Kaspersky:Padobot.aa, McAfee:BackDoor-AXJ, Microsoft:Berbew.BE.dr, NOD32v2:Padobot.AA, Norman:Padobot.DA, Panda:TrjMultidropper.BEK, Prevx1:MISSED, Rising:MISSED, Sophos:Doxpar-C, Sunbelt:Padobot.aa, Symantec:Ifbo.A, TheHacker:Padobot.aa, VBA32:Padobot.aa, VirusBuster:MISSED, Webwasher-Gateway:Padobot.AA  
WinXP Files DCPROMO.LOG, index.dat, Meplab32.dll, ndisrd.sys, niwx32.dll, system@searchportal.information1.txt, bblva32.dll, Lhckklfi.dll  
WinXP Processes CMD.EXE, CSRSS.EXE, EXPLORER.EXE, iexplore.exe, LSASS.EXE, MSMSGS.EXE, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE  
WinXP Registries HKEY_CURRENT_USER@...ActivatingDocument\.Current, HKEY_CURRENT_USER@...CurrentVersion\InternetSettings, HKEY_CURRENT_USER@...FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN, HKEY_CURRENT_USER@...InternetSettings\Zones, HKEY_CURRENT_USER@...Main\FeatureControl, HKEY_CURRENT_USER@...Microsoft\Windows, HKEY_CURRENT_USER@...Windows\CurrentVersion, HKEY_CURRENT_USER@...Zones\0, HKEY_CURRENT_USER@...Zones\1, HKEY_CURRENT_USER@...Zones\2, HKEY_CURRENT_USER@...Zones\3, HKEY_CURRENT_USER@...Zones\4, HKEY_LOCAL_MACHINE@...CurrentVersion\InternetSettings, HKEY_LOCAL_MACHINE@...InternetSettings\Zones, HKEY_LOCAL_MACHINE@...Reliability\UserDefined, HKEY_LOCAL_MACHINE@...Windows\CurrentVersion, HKEY_LOCAL_MACHINE@...Zones\0, HKEY_LOCAL_MACHINE@...Zones\1, HKEY_LOCAL_MACHINE@...Zones\2, HKEY_LOCAL_MACHINE@...Zones\3, HKEY_LOCAL_MACHINE@...Zones\4, HKEY_USERS@...ActivatingDocument\.Current, HKEY_USERS@...CurrentVersion\InternetSettings, HKEY_USERS@...Explorer\ActivatingDocument, HKEY_USERS@...Explorer\CabinetState, HKEY_USERS@...Explorer\RunMRU, HKEY_USERS@...FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN, HKEY_USERS@...InternetExplorer\Toolbar, HKEY_USERS@...InternetExplorer\TypedURLs, HKEY_USERS@...InternetSettings\Zones, HKEY_USERS@...Main\FeatureControl, HKEY_USERS@...Microsoft\Windows, HKEY_USERS@...Windows\CurrentVersion, HKEY_USERS@...Zones\0, HKEY_USERS@...Zones\1, HKEY_USERS@...Zones\2, HKEY_USERS@...Zones\3, HKEY_USERS@...Zones\4, HKEY_CURRENT_USER@...ActivatingDocument\\.Current, HKEY_CURRENT_USER@...CurrentVersion\\InternetSettings, HKEY_CURRENT_USER@...FeatureControl\\FEATURE_LOCALMACHINE_LOCKDOWN, HKEY_CURRENT_USER@...InternetSettings\\Zones, HKEY_CURRENT_USER@...Main\\FeatureControl, HKEY_CURRENT_USER@...Microsoft\\Windows, HKEY_CURRENT_USER@...Windows\\CurrentVersion, HKEY_CURRENT_USER@...Zones\\0, HKEY_CURRENT_USER@...Zones\\1, HKEY_CURRENT_USER@...Zones\\2, HKEY_CURRENT_USER@...Zones\\3, HKEY_CURRENT_USER@...Zones\\4, HKEY_LOCAL_MACHINE@...CurrentVersion\\InternetSettings, HKEY_LOCAL_MACHINE@...InternetSettings\\Zones, HKEY_LOCAL_MACHINE@...Reliability\\UserDefined, HKEY_LOCAL_MACHINE@...Windows\\CurrentVersion, HKEY_LOCAL_MACHINE@...Zones\\0, HKEY_LOCAL_MACHINE@...Zones\\1, HKEY_LOCAL_MACHINE@...Zones\\2, HKEY_LOCAL_MACHINE@...Zones\\3, HKEY_LOCAL_MACHINE@...Zones\\4, HKEY_USERS@...ActivatingDocument\\.Current, HKEY_USERS@...CurrentVersion\\InternetSettings, HKEY_USERS@...Explorer\\ActivatingDocument, HKEY_USERS@...Explorer\\CabinetState, HKEY_USERS@...Explorer\\RunMRU, HKEY_USERS@...FeatureControl\\FEATURE_LOCALMACHINE_LOCKDOWN, HKEY_USERS@...InternetExplorer\\Toolbar, HKEY_USERS@...InternetExplorer\\TypedURLs, HKEY_USERS@...InternetSettings\\Zones, HKEY_USERS@...Main\\FeatureControl, HKEY_USERS@...Microsoft\\Windows, HKEY_USERS@...Windows\\CurrentVersion, HKEY_USERS@...Zones\\0, HKEY_USERS@...Zones\\1, HKEY_USERS@...Zones\\2, HKEY_USERS@...Zones\\3, HKEY_USERS@...Zones\\4  
WinXP Ports 80, 1099, 3822, 1543  
Win-2Kf Files  
Win-2Kf Processes  
Win-2Kf Registries  
Win-2Kf Ports  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 ASPack 
Packer ID2  
Embedded DNS  
String Count  
String Link text
String MD5  
Timerange 365 Days 
Unpack Status unknown (FAILED : 3 : No Unpacked Binary Generated) 
Countries
Unpacked Link  
Callgraph  
API Resolution  
Comment none