Packed MD5 4f887ca27241fa8690be09c4a0c6e7f0 
Priority 12 
First 01/26/2008 
Last 06/25/2008 
Count 39 
History 39 hits: 01-26 to 06-25 
Unpacked MD5  
AV Hits
AV Count 32 
CC Servers 67.19.50.66:7000 222.177.11.165:7000 
DNS Lookups US:scorti1.dns2go.com CN:scorti1.dns2go.com 
Failed Connects US:67.19.50.66:7000 CN:211.96.97.44:7000 US:208.101.48.210:7000 CN:222.177.11.165:7000 KR:210.217.196.11:7000 
AV Name AhnLab-V3:MISSED, AntiVir:MISSED, Authentium:MISSED, Avast:MISSED, AVG:MISSED, BitDefender:MISSED, CAT-QuickHeal:MISSED, ClamAV:MISSED, DrWeb:MISSED, eSafe:MISSED, eTrust-Vet:MISSED, Ewido:MISSED, FileAdvisor:MISSED, Fortinet:MISSED, F-Prot:MISSED, F-Secure:MISSED, Ikarus:MISSED, Kaspersky:MISSED, McAfee:MISSED, Microsoft:MISSED, NOD32v2:MISSED, Norman:MISSED, Panda:MISSED, Prevx1:MISSED, Rising:MISSED, Sophos:MISSED, Sunbelt:MISSED, Symantec:MISSED, TheHacker:MISSED, VBA32:MISSED, VirusBuster:MISSED, Webwasher-Gateway:MISSED  
WinXP Files msnnmaneger.exe  
WinXP Processes CMD.EXE, CSRSS.EXE, EXPLORER.EXE, LSASS.EXE, MSMSGS.EXE, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE, msnnmaneger.exe, defrag.exe, DfrgFat.exe  
WinXP Registries HKEY_LOCAL_MACHINE@...CurrentVersion\RunServices, HKEY_USERS@...CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE@...CurrentVersion\\RunServices, HKEY_USERS@...CurrentVersion\\RunOnce  
WinXP Ports 1040, 20321, 1039, 5935, 1035, 1650, 1917, 1918, 1919, 1920, 1921, 1922, 1923, 1924, 1925, 1926, 1927, 1928, 1929, 1930, 1931, 1932, 1933, 1934, 1935, 1936, 1937, 1938, 1939, 1940, 1941, 1942, 1943, 1944, 1945, 1946, 1947, 1948, 1949, 1950, 1951, 1952, 1953, 1954, 1955, 1956, 1957, 1958, 1959, 1960, 1961, 1962, 1963, 1964, 1965, 1966, 1967, 1968, 1969, 1970, 1971, 1972, 1973, 1974, 1975, 1976, 1977, 1978, 1979, 1980, 1981, 1982, 1983, 1984, 1985, 1986, 1987, 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 1034, 3719, 4945  
Win-2Kf Files  
Win-2Kf Processes msnnmaneger.exe  
Win-2Kf Registries HKEY_LOCAL_MACHINE@...CurrentVersion\\RunServices, HKEY_USERS@...CurrentVersion\\Run  
Win-2Kf Ports 1041, 1461, 1462, 8671, 15245, 1046, 14527, 6822, 1045, 1052, 17047, 4771, 12232, 1030, 17627  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 none 
Packer ID2 none 
Embedded DNS  
String Count  
String Link text
String MD5  
Timerange 365 Days 
Unpack Status good (unpacked : 1 : Already Unpacked. (Code,Data) = (87.62%, 4.86%)) 
Countries 20 
Unpacked Link 4f887ca272 [1
Callgraph ASM:Graph 
API Resolution 36% 
Comment none