Packed MD5 8a759550333dd50078381b0e536bee02 
Priority
First 06/20/2008 
Last 08/27/2008 
Count 31 
History 31 hits: 06-20 to 08-27 
Unpacked MD5 9276c8b36b78b5048a0b2a06d88d694b  
AV Hits 29 28 
AV Count 32 
CC Servers 210.245.211.11:65520 
DNS Lookups :proxim.ircgalaxy.pl US:microsoft.com US:download.microsoft.com HK:proxim.ircgalaxy.pl DE:dl2.teenpassage.com PL:proxim.ircgalaxy.pl 
Failed Connects US:199.93.44.124:80 US:207.123.46.126:80 US:207.123.47.126:80 US:198.78.220.124:80 US:199.93.44.126:80 US:207.123.46.125:80 HK:210.245.211.11:65520 DE:85.114.143.2:80 US:209.84.20.126:80 DE:85.114.141.207:80 US:4.23.60.125:80 US:8.12.222.126:80 US:204.160.126.124:80 US:208.111.173.16:80 US:208.111.173.42:80 US:199.93.53.125:80 US:207.123.44.125:80 US:198.78.220.126:80 US:205.128.79.124:80 US:199.93.53.126:80 US:207.123.37.125:80 US:208.111.153.231:80 US:199.93.46.124:80 US:208.111.148.226:80 US:192.221.108.126:80 US:198.78.201.126:80 US:192.221.110.125:80 US:192.221.99.126:80 US:12.190.48.65:80 US:12.190.48.97:80 US:205.128.66.124:80 
AV Name AhnLab-V3:Virut.D, AntiVir:Virut.Gen, Authentium:Virut.9264, Avast:_Virut, AVG:Virut, BitDefender:Virtob.3.Gen, CAT-QuickHeal:Virut.D, ClamAV:Virut.ca, DrWeb:Virut.5, eSafe:MISSED, eTrust-Vet:Virut.9276, Ewido:MISSED, FileAdvisor:MISSED, Fortinet:MetaCrypt.5, F-Prot:Virut.9264, F-Secure:Virut.n, Ikarus:Virut.d, Kaspersky:Virut.n, McAfee:Virut.gen, Microsoft:Virut.AK, NOD32v2:Virut.E, Norman:Virut.D, Panda:Virutas.gen, Prevx1:MISSED, Rising:Virut.GEN, Sophos:Virut-L, Sunbelt:MISSED, Symantec:MISSED, TheHacker:Virut.gen, VBA32:Virut.3, VirusBuster:Virut.Gen, Webwasher-Gateway:Virut.Gen  
WinXP Files accwiz.exe, actmovie.exe, agentsvr.exe, ahui.exe, alg.exe, arp.exe, asr_fmt.exe, asr_ldm.exe, at.exe, atmadm.exe, attrib.exe, bootcfg.exe, bootok.exe, bootvrfy.exe, cacls.exe, calc.exe, charmap.exe, chkdsk.exe, chkntfs.exe, cidaemon.exe, cipher.exe, cisvc.exe, ckcnv.exe, cleanmgr.exe, cliconfg.exe, clipbrd.exe, clipsrv.exe, cmdl32.exe, cmmon32.exe, cmstp.exe, compact.exe, comp.exe, comrepl.exe, conime.exe, control.exe, convert.exe, cscript.exe, ctfmon.exe, dcomcnfg.exe, ddeshare.exe, defrag.exe, dfrgfat.exe, dfrgntfs.exe, diantz.exe, diskpart.exe, diskperf.exe, dllhost.exe, dllhst3g.exe, dmadmin.exe, dmremote.exe, doskey.exe, dplaysvr.exe, dpnsvr.exe, dpvsetup.exe, driverquery.exe, drwtsn32.exe, dumprep.exe, dvdplay.exe, dvdupgrd.exe, dxdiag.exe, esentutl.exe, eudcedit.exe, eventcreate.exe, eventtriggers.exe, eventvwr.exe, expand.exe, extrac32.exe, fc.exe, find.exe, findstr.exe, finger.exe, fixmapi.exe, fontview.exe, forcedos.exe, freecell.exe, fsutil.exe, ftp.exe, getmac.exe, gpresult.exe, gpupdate.exe, grpconv.exe, HelpCtr.exe, help.exe, HelpHost.exe, HelpSvc.exe, hh.exe, hostname.exe, ie4uinit.exe, iexpress.exe, imapi.exe, ipconfig.exe, ipsec6.exe, ipv6.exe, ipxroute.exe, label.exe, lights.exe, lnkstub.exe, locator.exe, lodctr.exe, logagent.exe, logman.exe, logoff.exe, logon.scr, logonui.exe, lpq.exe, lpr.exe, magnify.exe, makecab.exe, migload.exe, migpwd.exe, migwiz_a.exe, migwiz.exe, mmc.exe, mnmsrvc.exe, mobsync.exe, mofcomp.exe, mountvol.exe, mplay32.exe, mpnotify.exe, mqbkup.exe, mqsvc.exe, mqtgsvc.exe, mrinfo.exe, msconfig.exe, msdtc.exe, msg.exe, mshearts.exe, mshta.exe, msiexec.exe, msoobe.exe, mspaint.exe, msswchx.exe, mstinit.exe, mstsc.exe, narrator.exe, nbtstat.exe, nddeapir.exe, net1.exe, netdde.exe, net.exe, netsetup.exe, netsh.exe, netstat.exe, NOTEPAD.EXE, notiflag.exe, nppagent.exe, nslookup.exe, ntbackup.exe, ntsd.exe, ntvdm.exe, nwscript.exe, odbcad32.exe, odbcconf.exe, oobebaln.exe, openfiles.exe, osk.exe, osuninst.exe, packager.exe, pathping.exe, pentnt.exe, perfmon.exe, ping6.exe, ping.exe, print.exe, progman.exe, proquota.exe, proxycfg.exe, qappsrv.exe, qprocess.exe, qwinsta.exe, rasautou.exe, rasdial.exe, rasphone.exe, rcimlby.exe, rcp.exe, rdpclip.exe, rdsaddin.exe, rdshost.exe, recover.exe, relog.exe, replace.exe, reset.exe, rexec.exe, route.exe, routemon.exe, rsh.exe, rsm.exe, rsmsink.exe, rsmui.exe, rsnotify.exe, rsopprov.exe, rstrui.exe, rsvp.exe, rtcshare.exe, runas.exe, rundll32.exe, runonce.exe, rwinsta.exe, savedump.exe, scardsvr.exe, sc.exe, schtasks.exe, scrcons.exe, scrnsave.scr, sdbinst.exe, secedit.exe, sessmgr.exe, sethc.exe, setup.exe, sfc.exe, shadow.exe, shmgrate.exe, shrpubw.exe, shutdown.exe, sigverif.exe, skeys.exe, smlogsvc.exe, sndrec32.exe, sndvol32.exe, sol.exe, sort.exe, spider.exe, srdiag.exe, ss3dfo.scr, ssbezier.scr, ssflwbox.scr, ssmarque.scr, ssmypics.scr, ssmyst.scr, sspipes.scr, ssstars.scr, sstext3d.scr, stimon.exe, subst.exe, SVCHOST.EXE, syncapp.exe, syskey.exe, sysocmgr.exe, systeminfo.exe, systray.exe, taskkill.exe, tasklist.exe, taskman.exe, taskmgr.exe, tcmsetup.exe, tcpsvcs.exe, telnet.exe, tftp.exe, tlntadmn.exe, tlntsess.exe, tlntsvr.exe, tourstart.exe, tracerpt.exe, tracert6.exe, tracert.exe, tscon.exe, tscupgrd.exe, tsdiscon.exe, tskill.exe, tsshutdn.exe, twunk_32.exe, typeperf.exe, unlodctr.exe, unsecapp.exe, UploadM.exe, upnpcont.exe, ups.exe, userinit.exe, usrmlnka.exe, usrprbda.exe, usrshuta.exe, utilman.exe, verifier.exe, vssadmin.exe, vssvc.exe, w32tm.exe, wbemtest.exe, wextract.exe, wiaacmgr.exe, winhlp32.exe, winmgmt.exe, winmine.exe, winmsd.exe, winver.exe, wmiadap.exe, wmiapsrv.exe, wmic.exe, wmiprvse.exe, wmpstub.exe, wpabaln.exe, wpnpinst.exe, write.exe, wscript.exe, wuauclt.exe, wupdmgr.exe, xcopy.exe,  
WinXP Processes CMD.EXE, CSRSS.EXE, DLLHOST.EXE, EXPLORER.EXE, LSASS.EXE, MSMSGS.EXE, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE, dwwin.exe  
WinXP Registries HKEY_LOCAL_MACHINE@...Microsoft\DownloadManager, HKEY_LOCAL_MACHINE@...Microsoft\\DownloadManager  
WinXP Ports 1031, 707, 1034, 1035, 69, 1036  
Win-2Kf Files  
Win-2Kf Processes  
Win-2Kf Registries  
Win-2Kf Ports  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 Armadillo 
Packer ID2  
Embedded DNS  
String Count 81 
String Link text
String MD5 44926503ef0b75a14cdb2930659e3dbc 
Timerange 365 Days 
Unpack Status unknown (FAILED : 4 : Unpacking Timed Out) 
Countries
Unpacked Link none[4
Callgraph none:none 
API Resolution  
Comment none