Packed MD5 69f32b85f1de3c41948ae51b4ba3f4bb 
Priority
First 03/03/2012 
Last 05/12/2012 
Count  
History  
Unpacked MD5  
AV Hits 37 33 39 
AV Count 32 
CC Servers 83.133.119.197:65520 114.112.255.81:65520 
DNS Lookups :proxim.ircgalaxy.pl US:microsoft.com CN:zhongmail.com :hujikl23.com DE:proxim.ircgalaxy.pl EU:tyui89.com :proxima.ircgalaxy.pl :serf654.com EU:open-consulting-company.com :www.zzxml.com US:nevof.com :www.google-analytics.com US:images01.tzimg.com :auto.notecm.com CN:tn.ddcxlayer.net CN:yn.ddcxlayer.net EU:www.rtyhu.com EU:hujikl23.com :www.lddwj.com CA:ontollc.com :wpad US:p.chango.com :parkedcom.d.chango.com US:tag.admeld.com :r.casalemedia.com :cm.g.doubleclick.net :ads.adbrite.com US:pixel.rubiconproject.com :www.uufeed.com US:www.gameonlinehub.com 
Failed Connects EU:141.136.16.20:80 US:209.59.194.240:80 EU:91.217.162.94:80 173.193.128.130:80 CN:210.83.81.173:888 US:198.87.51.8:80 74.125.224.141:80 CN:60.190.222.242:888 DE:83.133.119.197:65520 
AV Name AhnLab-V3:Welchia.10240, AntiVir:Nachi.A.1, Authentium:MISSED, Avast:_Virut, AVG:Nachi.A, BitDefender:Generic.22648, CAT-QuickHeal:MISSED, ClamAV:Virut.ca, DrWeb:Virut.5, eSafe:Virut.gen, eTrust-Vet:Virut.9276, Ewido:MISSED, FileAdvisor:MISSED, Fortinet:Virut.fam, F-Prot:Virut.9264, F-Secure:Generic.22648, Ikarus:Virut, Kaspersky:Welchia.s, McAfee:Nachi.a, Microsoft:Virut.AK, NOD32v2:MISSED, Norman:Virut.D2, Panda:Virutas.gen, Prevx1:MISSED, Rising:Virut.du, Sophos:Vetor-A, Sunbelt:MISSED, Symantec:Virut.B, TheHacker:Virut.gen2, VBA32:Virut.3, VirusBuster:Virut.Gen, Webwasher-Gateway:MISSED  
WinXP Files accwiz.exe, actmovie.exe, agentsvr.exe, ahui.exe, alg.exe, arp.exe, asr_fmt.exe, asr_ldm.exe, at.exe, atmadm.exe, attrib.exe, bootcfg.exe, bootok.exe, bootvrfy.exe, cacls.exe, calc.exe, charmap.exe, chkdsk.exe, chkntfs.exe, cidaemon.exe, cipher.exe, cisvc.exe, ckcnv.exe, cleanmgr.exe, cliconfg.exe, clipbrd.exe, clipsrv.exe, cmdl32.exe, cmmon32.exe, cmstp.exe, compact.exe, comp.exe, comrepl.exe, conime.exe, control.exe, convert.exe, cscript.exe, ctfmon.exe, dcomcnfg.exe, ddeshare.exe, defrag.exe, dfrgfat.exe, dfrgntfs.exe, diantz.exe, diskpart.exe, diskperf.exe, dllhost.exe, dllhst3g.exe, dmadmin.exe, dmremote.exe, doskey.exe, dplaysvr.exe, dpnsvr.exe, dpvsetup.exe, driverquery.exe, drwtsn32.exe, dumprep.exe, dvdplay.exe, dvdupgrd.exe, dxdiag.exe, esentutl.exe, eudcedit.exe, eventcreate.exe, eventtriggers.exe, eventvwr.exe, expand.exe, extrac32.exe, fc.exe, find.exe, findstr.exe, finger.exe, fixmapi.exe, fontview.exe, forcedos.exe, freecell.exe, fsutil.exe, ftp.exe, getmac.exe, gpresult.exe, gpupdate.exe, grpconv.exe, HelpCtr.exe, help.exe, HelpHost.exe, HelpSvc.exe, hh.exe, hostname.exe, ie4uinit.exe, iexpress.exe, imapi.exe, ipconfig.exe, ipsec6.exe, ipv6.exe, ipxroute.exe, label.exe, lights.exe, lnkstub.exe, locator.exe, lodctr.exe, logagent.exe, logman.exe, logoff.exe, logon.scr, logonui.exe, lpq.exe, lpr.exe, magnify.exe, makecab.exe, migload.exe, migpwd.exe, migwiz_a.exe, migwiz.exe, mmc.exe, mnmsrvc.exe, mobsync.exe, mofcomp.exe, mountvol.exe, mplay32.exe, mpnotify.exe, mqbkup.exe, mqsvc.exe, mqtgsvc.exe, mrinfo.exe, msconfig.exe, msdtc.exe, msg.exe, mshearts.exe, mshta.exe, msiexec.exe, msoobe.exe, mspaint.exe, msswchx.exe, mstinit.exe, mstsc.exe, narrator.exe, nbtstat.exe, nddeapir.exe, net1.exe, netdde.exe, net.exe, netsetup.exe, netsh.exe, netstat.exe, NOTEPAD.EXE, notiflag.exe, nppagent.exe, nslookup.exe, ntbackup.exe, ntsd.exe, ntvdm.exe, nwcwks.dll, nwscript.exe, odbcad32.exe, odbcconf.exe, oobebaln.exe, openfiles.exe, osk.exe, osuninst.exe, packager.exe, pathping.exe, pentnt.exe, perfmon.exe, ping6.exe, print.exe, progman.exe, proquota.exe, proxycfg.exe, qappsrv.exe, qprocess.exe, qwinsta.exe, rasautou.exe, rasdial.exe, rasphone.exe, rcimlby.exe, rcp.exe, rdpclip.exe, rdsaddin.exe, rdshost.exe, recover.exe, relog.exe, replace.exe, reset.exe, rexec.exe, routemon.exe, rsh.exe, rsm.exe, rsmsink.exe, rsmui.exe, rsnotify.exe, rsopprov.exe, rstrui.exe, rsvp.exe, rtcshare.exe, runas.exe, rundll32.exe, runonce.exe, rwinsta.exe, savedump.exe, scardsvr.exe, schtasks.exe, scrcons.exe, scrnsave.scr, sdbinst.exe, secedit.exe, sessmgr.exe, sethc.exe, sfc.exe, shadow.exe, shmgrate.exe, shrpubw.exe, shutdown.exe, sigverif.exe, skeys.exe, smlogsvc.exe, sndrec32.exe, sndvol32.exe, sol.exe, sort.exe, spider.exe, srdiag.exe, ss3dfo.scr, ssbezier.scr, ssflwbox.scr, ssmarque.scr, ssmypics.scr, ssmyst.scr, sspipes.scr, ssstars.scr, sstext3d.scr, stimon.exe, subst.exe, SVCHOST.EXE, syncapp.exe, syskey.exe, sysocmgr.exe, systeminfo.exe, systray.exe, taskkill.exe, tasklist.exe, taskman.exe, taskmgr.exe, tcmsetup.exe, tcpsvcs.exe, telnet.exe, tftp.exe, tlntadmn.exe, tlntsess.exe, tlntsvr.exe, tourstart.exe, tracerpt.exe, tracert6.exe, tracert.exe, tscon.exe, tscupgrd.exe, tsdiscon.exe, tskill.exe, tsshutdn.exe, twunk_32.exe, typeperf.exe, unlodctr.exe, unsecapp.exe, UploadM.exe, upnpcont.exe, ups.exe, userinit.exe, usrmlnka.exe, usrprbda.exe, usrshuta.exe, utilman.exe, verifier.exe, VRT2.tmp, vssadmin.exe, vssvc.exe, w32tm.exe, wbemtest.exe, wextract.exe, wiaacmgr.exe, winhlp32.exe, winmgmt.exe, winmine.exe, winmsd.exe, winver.exe, wmiadap.exe, wmiapsrv.exe, wmic.exe, wmpstub.exe, wpabaln.exe, wpnpinst.exe, write.exe, wuauclt.exe, wupdmgr.exe, xcopy.exe, wmiprvse.exe  
WinXP Processes CMD.EXE, CSRSS.EXE, DLLHOST.EXE, EXPLORER.EXE, LSASS.EXE, MSMSGS.EXE, osjk8s.exe, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, VRT2.tmp, WINLOGON.EXE, wmiprvse.exe, IEXPLORE.EXE  
WinXP Registries HKEY_LOCAL_MACHINE@...Folder\\Hidden, HKEY_LOCAL_MACHINE@...Hidden\\NOHIDDEN, HKEY_LOCAL_MACHINE@...Hidden\\SHOWALL, HKEY_LOCAL_MACHINE@...Microsoft\\Tbsolute, HKEY_LOCAL_MACHINE@...Software\\mdlwe42dgd, HKEY_LOCAL_MACHINE@...Software\\tgs90gv74r, HKEY_USERS@...Explorer\\Advanced  
WinXP Ports 1031, 1034, 1038, 1043, 1048, 1052, 135, 8000, 1037, 1050, 1035, 1039, 1066  
Win-2Kf Files  
Win-2Kf Processes  
Win-2Kf Registries  
Win-2Kf Ports  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 none 
Packer ID2 none 
Embedded DNS  
String Count  
String Link text
String MD5  
Timerange 365 Days 
Unpack Status unknown () 
Countries
Unpacked Link  
Callgraph  
API Resolution  
Comment none