Packed MD5 1772d47c4c4903619f533894dccd1177 
Priority
First 07/03/2009 
Last 07/12/2009 
Count  
History  
Unpacked MD5 8bd43a2dcecd789c06bd983538807d83  
AV Hits 18 9 31 9 29 
AV Count 32 
CC Servers 221.5.74.39:65520 218.93.205.24:65520 85.114.137.60:80 221.5.74.39:65520 85.114.137.60:80 218.93.205.24:65520 218.93.205.24:65520 221.5.74.39:65520 
DNS Lookups CN:proxim.ircgalaxy.pl US:microsoft.com EU:dfeuvyoage.net CN:brenz.pl :cmdmand.info :inporter.info NL:thcway.info CN:lometr.pl CN:put.ghura.pl DE:www.exerevenue.com CN:www.webalfa.cn US:www.maxmind.com US:www.getmyip.org :checkip.dyndns.org CN:proxima.ircgalaxy.pl :www.google.com CN:trisem.com BE:upload.octopus-multimedia.be GB:zz-dns.com US:www.microsoft.com :zaikod.cn CN:dailybucks.vipinstall.cn :onuka.cn US:ns2.msft.net US:alt2.gmail-smtp-in.l.google.com US:alt3.gmail-smtp-in.l.google.com US:alt1.gmail-smtp-in.l.google.com :alt4.gmail-smtp-in.l.google.com :er20090515.com :uprtrishest.com DK:liesbethmilan.be CN:www.upononjob.cn :horobl.cn US:mx4.hotmail.com :a.mx.mail.yahoo.com US:b.mx.mail.yahoo.com US:c.mx.mail.yahoo.com US:d.mx.mail.yahoo.com US:e.mx.mail.yahoo.com :f.mx.mail.yahoo.com US:g.mx.mail.yahoo.com 
Failed Connects CN:221.5.74.39:65520 CN:218.93.205.24:65520 CN:211.95.79.6:80 GB:212.117.177.136:3954 US:64.191.104.197:3954 72.167.37.74:80 CN:222.186.13.27:80 US:64.191.104.197:25 US:67.19.219.74:80 EU:91.207.4.138:80 208.115.108.122:3954 GB:212.117.177.212:4831 
AV Name AhnLab-V3:Virut.D, AntiVir:Virut.Gen, Authentium:Virut.9264, Avast:_Virut, AVG:Virut, BitDefender:Virtob.3.Gen, CAT-QuickHeal:Virut.D, ClamAV:Virut.da, DrWeb:Virut.5, eSafe:MISSED, eTrust-Vet:Virut.9276, Ewido:MISSED, FileAdvisor:MISSED, Fortinet:MetaCrypt.5, F-Prot:Virut.9264, F-Secure:Virut.n, Ikarus:Virut.d, Kaspersky:Virut.n, McAfee:Virut.gen, Microsoft:Virut.AK, NOD32v2:Virut.E, Norman:Virut.D, Panda:Virutas.gen, Prevx1:MISSED, Rising:Virut.aw, Sophos:Vetor-A, Sunbelt:MISSED, Symantec:Virut.B, TheHacker:Virut.gen, VBA32:Virut.3, VirusBuster:Virut.Gen, Webwasher-Gateway:Virut.Gen  
WinXP Files 2.tmp, 3.tmp, accwiz.exe, actmovie.exe, agentsvr.exe, ahui.exe, alg.exe, arp.exe, asr_fmt.exe, asr_ldm.exe, at.exe, atmadm.exe, attrib.exe, bootcfg.exe, bootok.exe, bootvrfy.exe, cacls.exe, calc.exe, charmap.exe, chkdsk.exe, chkntfs.exe, cidaemon.exe, cipher.exe, cisvc.exe, ckcnv.exe, cleanmgr.exe, cliconfg.exe, clipbrd.exe, clipsrv.exe, cmdl32.exe, cmmon32.exe, cmstp.exe, compact.exe, comp.exe, comrepl.exe, conime.exe, control.exe, convert.exe, cscript.exe, ctfmon.exe, dcomcnfg.exe, ddeshare.exe, defrag.exe, dfrgfat.exe, dfrgntfs.exe, diantz.exe, diskpart.exe, diskperf.exe, dllhost.exe, dllhst3g.exe, dmadmin.exe, dmremote.exe, doskey.exe, dplaysvr.exe, dpnsvr.exe, dpvsetup.exe, driverquery.exe, drwtsn32.exe, dumprep.exe, dvdplay.exe, dvdupgrd.exe, dxdiag.exe, esentutl.exe, eudcedit.exe, eventcreate.exe, eventtriggers.exe, eventvwr.exe, expand.exe, extrac32.exe, fc.exe, find.exe, findstr.exe, finger.exe, fixmapi.exe, fontview.exe, forcedos.exe, freecell.exe, fsutil.exe, ftp.exe, getmac.exe, gpresult.exe, gpupdate.exe, grpconv.exe, HelpCtr.exe, help.exe, HelpHost.exe, HelpSvc.exe, hh.exe, hostname.exe, ie4uinit.exe, iexpress.exe, imapi.exe, ipconfig.exe, ipsec6.exe, ipv6.exe, ipxroute.exe, label.exe, lights.exe, lnkstub.exe, locator.exe, lodctr.exe, logagent.exe, logman.exe, logoff.exe, logon.scr, logonui.exe, lpq.exe, lpr.exe, magnify.exe, makecab.exe, migload.exe, migpwd.exe, migwiz_a.exe, migwiz.exe, mmc.exe, mnmsrvc.exe, mobsync.exe, mofcomp.exe, mountvol.exe, mplay32.exe, mpnotify.exe, mqbkup.exe, mqsvc.exe, mqtgsvc.exe, mrinfo.exe, msconfig.exe, msdtc.exe, msg.exe, mshearts.exe, mshta.exe, msiexec.exe, msoobe.exe, mspaint.exe, msswchx.exe, mstinit.exe, mstsc.exe, narrator.exe, nbtstat.exe, nddeapir.exe, net1.exe, netdde.exe, net.exe, netsetup.exe, netsh.exe, netstat.exe, NOTEPAD.EXE, notiflag.exe, nppagent.exe, nslookup.exe, ntbackup.exe, ntsd.exe, ntvdm.exe, nwscript.exe, odbcad32.exe, odbcconf.exe, oobebaln.exe, openfiles.exe, osk.exe, osuninst.exe, packager.exe, pathping.exe, pentnt.exe, perfmon.exe, ping6.exe, print.exe, progman.exe, proquota.exe, proxycfg.exe, qappsrv.exe, qprocess.exe, qwinsta.exe, rasautou.exe, rasdial.exe, rasphone.exe, rcimlby.exe, rcp.exe, rdpclip.exe, rdsaddin.exe, rdshost.exe, recover.exe, relog.exe, replace.exe, reset.exe, rexec.exe, routemon.exe, rsh.exe, rsm.exe, rsmsink.exe, rsmui.exe, rsnotify.exe, rsopprov.exe, rstrui.exe, rsvp.exe, rtcshare.exe, runas.exe, rundll32.exe, runonce.exe, rwinsta.exe, savedump.exe, scardsvr.exe, schtasks.exe, scrcons.exe, scrnsave.scr, sdbinst.exe, secedit.exe, sessmgr.exe, sethc.exe, sfc.exe, shadow.exe, shmgrate.exe, shrpubw.exe, shutdown.exe, sigverif.exe, skeys.exe, smlogsvc.exe, sndrec32.exe, sndvol32.exe, sol.exe, sort.exe, spider.exe, srdiag.exe, ss3dfo.scr, ssbezier.scr, ssflwbox.scr, ssmarque.scr, ssmypics.scr, ssmyst.scr, sspipes.scr, ssstars.scr, sstext3d.scr, stimon.exe, subst.exe, SVCHOST.EXE, syncapp.exe, syskey.exe, sysocmgr.exe, systeminfo.exe, systray.exe, taskkill.exe, tasklist.exe, taskman.exe, taskmgr.exe, tcmsetup.exe, tcpsvcs.exe, telnet.exe, tftp.exe, tlntadmn.exe, tlntsess.exe, tlntsvr.exe, tourstart.exe, tracerpt.exe, tracert6.exe, tracert.exe, tscon.exe, tscupgrd.exe, tsdiscon.exe, tskill.exe, tsshutdn.exe, twunk_32.exe, typeperf.exe, UAC8d48.tmp, UAC8db5.tmp, UAC8eee.tmp, UACd.sys, unlodctr.exe, unsecapp.exe, UploadM.exe, upnpcont.exe, ups.exe, userinit.exe, usrmlnka.exe, usrprbda.exe, usrshuta.exe, utilman.exe, verifier.exe, vssadmin.exe, vssvc.exe, w32tm.exe, wbemtest.exe, wextract.exe, wiaacmgr.exe, winhlp32.exe, winmgmt.exe, winmine.exe, winmsd.exe, winver.exe, wmiadap.exe, wmiapsrv.exe, wmic.exe, wmiprvse.exe, wmpstub.exe, wpabaln.exe, wpnpinst.exe, write.exe, wuauclt.exe, wupdmgr.exe, xcopy.exe, cmd.exe, ftpupd.exe, spoolsv.exe, UAC3238.tmp, UACe2b0.tmp, UACe2c0.tmp, uxqjudnu.exe, UAC66af.tmp, UAC66bf.tmp, UACb6b3.tmp, , 010112010146118114.dat, 0101120101464849.dat, 4.tmp, 934fdfg34fgjf23, ld12.exe, olispzj.exe, UACcb21.tmp, UACcb40.tmp, UACcd05.tmp, VRT7.tmp, UACbded.tmp, UACbe89.tmp, UACc1f4.tmp  
WinXP Processes 3.tmp, CMD.EXE, CSRSS.EXE, DLLHOST.EXE, EXPLORER.EXE, LSASS.EXE, MSMSGS.EXE, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE, dwwin.exe, ld12.exe, pp10.exe  
WinXP Registries HKEY_LOCAL_MACHINE@...Microsoft\\DownloadManager, HKEY_LOCAL_MACHINE@...Microsoft\\Wireless, HKEY_USERS@...Explorer\\Navigating, HKEY_USERS@...Navigating\\.Current, HKEY_USERS@...Navigating\\.Default  
WinXP Ports 1031, 1039, 1036, 1032, 1034, 1040, 1037, 1046, 8085, 1041, 1035  
Win-2Kf Files  
Win-2Kf Processes  
Win-2Kf Registries  
Win-2Kf Ports  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 Armadillo 
Packer ID2  
Embedded DNS  
String Count  
String Link text
String MD5  
Timerange 365 Days 
Unpack Status unknown ( : 0 : Unpacking Provided Binary. (Code,Data) = (, )) 
Countries
Unpacked Link  
Callgraph  
API Resolution  
Comment none