Packed MD5 897d59617c14270e9983d2aafcefedab 
Priority
First 06/28/2008 
Last 07/01/2008 
Count 48 
History 48 hits: 06-28 to 07-01 
Unpacked MD5  
AV Hits 25 27 
AV Count 32 
CC Servers 210.245.211.11:65520 
DNS Lookups US:ksn.a1001186.wrs.mcboo.com HK:proxim.ircgalaxy.pl US:chat-shqip.org US:w3bs.chat-shqip.org DE:dl2.teenpassage.com US:wr.mcboo.com IL:dl.mcboo.com US:b156.mcboo.com :proxima.ircgalaxy.pl US:microsoft.com HK:proxima.ircgalaxy.pl US:b152.mcboo.com US:b155.mcboo.com US:download.microsoft.com 
Failed Connects HK:210.245.211.11:65520 US:69.247.147.113:12351 US:69.247.147.113:13001 IL:194.90.224.82:80 US:206.251.244.226:80 118.110.109.41:21 US:206.71.190.187:80 HK:210.245.211.11:80 92.40.29.3:8228 US:72.247.30.81:80 US:72.247.30.83:80 TW:59.115.148.54:49645 DE:85.114.143.2:80 US:4.90.52.175:21 
AV Name AhnLab-V3:MISSED, AntiVir:TRCrypt.ULPM.Gen, Authentium:Heuristic-166!Eldorado, Avast:_Agent-ZII, AVG:Downloader.Small.CJS, BitDefender:Dropper.RZF, CAT-QuickHeal:TrojanDropper.Small.bkz, ClamAV:MISSED, DrWeb:MulDrop.15779, eSafe:MISSED, eTrust-Vet:Multidropper.DB, Ewido:Dropper.Small.bkz, FileAdvisor:MISSED, Fortinet:Small.BKZ!tr, F-Prot:Heuristic-166!Eldorado, F-Secure:Trojan-Dropper.Small.bkz, Ikarus:Trojan-Dropper.Small.bkz, Kaspersky:Trojan-Dropper.Small.bkz, McAfee:MISSED, Microsoft:TrojanDownloader_Matcash.F, NOD32v2:MISSED, Norman:MISSED, Panda:MISSED, Prevx1:MISSED, Rising:Undef.ipp, Sophos:MalDownLdr-O, Sunbelt:MISSED, Symantec:Dropper, TheHacker:MISSED, VBA32:Trojan-Dropper.Small.bkz, VirusBuster:MISSED, Webwasher-Gateway:Crypt.ULPM.Gen  
WinXP Files accwiz.exe, actmovie.exe, agentsvr.exe, ahui.exe, alg.exe, arp.exe, asr_fmt.exe, asr_ldm.exe, at.exe, atmadm.exe, attrib.exe, bootcfg.exe, bootok.exe, bootvrfy.exe, cacls.exe, calc.exe, charmap.exe, chkdsk.exe, chkntfs.exe, cidaemon.exe, cipher.exe, cisvc.exe, ckcnv.exe, cleanmgr.exe, cliconfg.exe, clipbrd.exe, clipsrv.exe, cmd.exe, cmdl32.exe, cmmon32.exe, cmstp.exe, compact.exe, comp.exe, comrepl.exe, conime.exe, control.exe, convert.exe, cscript.exe, ctfmom.exe, ctfmon.exe, dcomcnfg.exe, ddeshare.exe, defrag.exe, dfrgfat.exe, dfrgntfs.exe, diantz.exe, diskpart.exe, diskperf.exe, dllhost.exe, dllhst3g.exe, dmadmin.exe, dmremote.exe, doskey.exe, dplaysvr.exe, dpnsvr.exe, dpvsetup.exe, driverquery.exe, drwtsn32.exe, dumprep.exe, dvdplay.exe, dvdupgrd.exe, dxdiag.exe, esentutl.exe, eudcedit.exe, eventcreate.exe, eventtriggers.exe, eventvwr.exe, expand.exe, extrac32.exe, fc.exe, find.exe, findstr.exe, finger.exe, fixmapi.exe, fontview.exe, forcedos.exe, freecell.exe, fsutil.exe, ftp.exe, getmac.exe, gpresult.exe, gpupdate.exe, grpconv.exe, HelpCtr.exe, help.exe, HelpHost.exe, HelpSvc.exe, hh.exe, hostname.exe, hosts, ie4uinit.exe, iexpress.exe, imapi.exe, ipconfig.exe, ipsec6.exe, ipv6.exe, ipxroute.exe, label.exe, lights.exe, lnkstub.exe, locator.exe, lodctr.exe, logagent.exe, logman.exe, logoff.exe, logon.scr, logonui.exe, lpq.exe, lpr.exe, magnify.exe, makecab.exe, migload.exe, migpwd.exe, migwiz_a.exe, migwiz.exe, mmc.exe, mnmsrvc.exe, mobsync.exe, mofcomp.exe, mountvol.exe, mplay32.exe, mpnotify.exe, mqbkup.exe, mqsvc.exe, mqtgsvc.exe, mrinfo.exe, mrofinu1001186.exe, msconfig.exe, msdtc.exe, msg.exe, mshearts.exe, mshta.exe, msiexec.exe, msoobe.exe, mspaint.exe, msswchx.exe, mstinit.exe, mstsc.exe, narrator.exe, nbtstat.exe, nddeapir.exe, net1.exe, netdde.exe, net.exe, netsetup.exe, netsh.exe, netstat.exe, NOTEPAD.EXE, notiflag.exe, nppagent.exe, nslookup.exe, ntbackup.exe, ntsd.exe, ntvdm.exe, nwscript.exe, odbcad32.exe, odbcconf.exe, oobebaln.exe, openfiles.exe, osk.exe, osuninst.exe, packager.exe, pathping.exe, pentnt.exe, perfmon.exe, ping6.exe, print.exe, progman.exe, proquota.exe, proxycfg.exe, qappsrv.exe, qprocess.exe, qwinsta.exe, rasautou.exe, rasdial.exe, rasphone.exe, rcimlby.exe, rcp.exe, rdpclip.exe, rdsaddin.exe, rdshost.exe, recover.exe, relog.exe, replace.exe, reset.exe, rexec.exe, routemon.exe, rsh.exe, rsm.exe, rsmsink.exe, rsmui.exe, rsnotify.exe, rsopprov.exe, rstrui.exe, rsvp.exe, rtcshare.exe, runas.exe, rundll32.exe, runonce.exe, rwinsta.exe, savedump.exe, scardsvr.exe, schtasks.exe, scrcons.exe, scrnsave.scr, sdbinst.exe, secedit.exe, sessmgr.exe, sethc.exe, sfc.exe, shadow.exe, shmgrate.exe, shrpubw.exe, shutdown.exe, sigverif.exe, skeys.exe, smlogsvc.exe, sndrec32.exe, sndvol32.exe, sol.exe, sort.exe, spider.exe, srdiag.exe, ss3dfo.scr, ssbezier.scr, ssflwbox.scr, ssmarque.scr, ssmypics.scr, ssmyst.scr, sspipes.scr, ssstars.scr, sstext3d.scr, stimon.exe, subst.exe, syncapp.exe, syskey.exe, sysocmgr.exe, systeminfo.exe, systray.exe, taskkill.exe, tasklist.exe, taskman.exe, taskmgr.exe, tcmsetup.exe, tcpsvcs.exe, telnet.exe, tftp.exe, tlntadmn.exe, tlntsess.exe, tlntsvr.exe, tourstart.exe, tracerpt.exe, tracert6.exe, tracert.exe, tscon.exe, tscupgrd.exe, tsdiscon.exe, tskill.exe, tsshutdn.exe, twunk_32.exe, typeperf.exe, unlodctr.exe, unsecapp.exe, UploadM.exe, upnpcont.exe, ups.exe, userinit.exe, usrmlnka.exe, usrprbda.exe, usrshuta.exe, utilman.exe, verifier.exe, VRT1.tmp, vssadmin.exe, vssvc.exe, w32tm.exe, wbemtest.exe, wextract.exe, wiaacmgr.exe, winhlp32.exe, winmgmt.exe, winmine.exe, winmsd.exe, winver.exe, wmiadap.exe, wmiapsrv.exe, wmic.exe, wmiprvse.exe, wmpstub.exe, wpabaln.exe, wpnpinst.exe, write.exe, wuauclt.exe, wupdmgr.exe, xcopy.exe, exlorers.exe, mrofinu1001186.exe.tmp, VRT3.tmp, iexplorer.exe, , VRT2.tmp, b156.exe, VRR1.tmp  
WinXP Processes CMD.EXE, CSRSS.EXE, ctfmom.exe, EXPLORER.EXE, LSASS.EXE, mrofinu1001186.exe, MSMSGS.EXE, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE, defrag.exe, DfrgFat.exe, exlorers.exe, iexplorer.exe, dwwin.exe  
WinXP Registries HKEY_CLASSES_ROOT@...HKEY_CLASSES_ROOT\\WR, HKEY_LOCAL_MACHINE@...Classes\\WR, HKEY_LOCAL_MACHINE@...CurrentVersion\\RunServices, HKEY_USERS@...CurrentVersion\\RunOnce, HKEY_LOCAL_MACHINE@...Microsoft\\DownloadManager, HKEY_USERS@...CurrentVersion\\Uninstall, HKEY_USERS@...Software\\Classes, HKEY_USERS@...Uninstall\\Sakora  
WinXP Ports 1037, 1053, 12045, 14722, 1064, 8778, 1044, 1050, 7134, 1039, 1052, 13155, 1038, 10373, 1055, 1033, 15892, 1036, 20610, 1056, 4153  
Win-2Kf Files  
Win-2Kf Processes  
Win-2Kf Registries  
Win-2Kf Ports  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 none 
Packer ID2 none 
Embedded DNS  
String Count  
String Link text
String MD5  
Timerange 365 Days 
Unpack Status unknown () 
Countries 11 
Unpacked Link none[none
Callgraph none:none 
API Resolution  
Comment none