Packed MD5	1a2c0e6130850f8fd9b9b5309413cd00
Priority	24
First	06/11/2009
Last	11/01/2009
Count
History
Unpacked MD5
AV Hits	29
AV Count	32
CC Servers
DNS Lookups
Failed Connects
AV Name	AhnLab-V3:Sasser.15872.B, AntiVir:Sasser.A.14, Authentium:Sasser.B, Avast:_Sasser-B, AVG:I-Sasser.B, BitDefender:Sasser.B, CAT-QuickHeal:Sasser.B, ClamAV:Sasser.B, DrWeb:HLLW.Jobaka, eSafe:Sasser.a, eTrust-Vet:Sasser.B, Ewido:Sasser.a, FileAdvisor:MISSED, Fortinet:Sasser.B, F-Prot:Sasser.B, F-Secure:MISSED, Ikarus:Email-Plexus, Kaspersky:Sasser.a, McAfee:Sasser.b, Microsoft:Sasser.dam, NOD32v2:Sasser.B, Norman:Sasser.B, Panda:Sasser.B.worm, Prevx1:MISSED, Rising:MISSED, Sophos:Sasser-B, Sunbelt:Sasser.d, Symantec:Sasser.B.Worm, TheHacker:Malware.corr.gen, VBA32:Sasser.b, VirusBuster:I-Sasser.B, Webwasher-Gateway:Sasser.A.14
WinXP Files	21300_up.exe, avserve2.exe, 1837_up.exe, 27009_up.exe, 4499_up.exe, 4237_up.exe, 9070_up.exe, 16473_up.exe, 13949_up.exe, 20999_up.exe, 23394_up.exe, 8591_up.exe, 16132_up.exe, 24308_up.exe, 30845_up.exe, 5817_up.exe, 12816_up.exe, 25349_up.exe, 26349_up.exe, 13834_up.exe, 2618_up.exe, 22126_up.exe, 2842_up.exe, 13492_up.exe, 1108_up.exe, 25135_up.exe, 10190_up.exe, 7272_up.exe
WinXP Processes	21300_up.exe, CMD.EXE, CSRSS.EXE, EXPLORER.EXE, LSASS.EXE, MSMSGS.EXE, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE, 1837_up.exe, 27009_up.exe, dwwin.exe, 4499_up.exe, 4237_up.exe, 9070_up.exe, 16473_up.exe, defrag.exe, DfrgFat.exe, 13949_up.exe, 20999_up.exe, 23394_up.exe, 8591_up.exe, 16132_up.exe, 24308_up.exe, 30845_up.exe, 5817_up.exe, 12816_up.exe, 25349_up.exe, 26349_up.exe, 13834_up.exe, 2618_up.exe, 22126_up.exe, 2842_up.exe, 13492_up.exe, 1108_up.exe, 25135_up.exe, 10190_up.exe, 7272_up.exe
WinXP Registries
WinXP Ports	1074, 1080, 1174, 1449, 1450, 1469, 1470, 1685, 1706, 1724, 1734, 2024, 2027, 2046, 2058, 2077, 2088, 2124, 2141, 2182, 2199, 2267, 2281, 2441, 2456, 2685, 2697, 2775, 2802, 2806, 2818, 2883, 2895, 3031, 3042, 3122, 3135, 3373, 3393, 3914, 3925, 5554, 9996, 1461, 1479, 1480, 1514, 1517, 1773, 1791, 1995, 2006, 2171, 2185, 2405, 2423, 2540, 2551, 2569, 2583, 2851, 2860, 2935, 2954, 3016, 3020, 3203, 3219, 3353, 3377, 3430, 3445, 3593, 3606, 3619, 3629, 3766, 3776, 4011, 4021, 4168, 4177, 4211, 4221, 4225, 4262, 4276, 4316, 4325, 4328, 4337, 4500, 4522, 4984, 4998, 1078, 1087, 1091, 1101, 1288, 1298, 1482, 1502, 1551, 1562, 1768, 1770, 1893, 1902, 2041, 2055, 2075, 2084, 2152, 2164, 2376, 2400, 2402, 2410, 2421, 2489, 2492, 2625, 2634, 2672, 2678, 2784, 2797, 3059, 3067, 3221, 3336, 3351, 3440, 3457, 3584, 3597, 3774, 3781, 3796, 3797, 3916, 3923, 4042, 4051, 4062, 4069, 4075, 4079, 4087, 4093, 4116, 4131, 4215, 4272, 4285, 4286, 4296, 4537, 4546, 4683, 4692, 4975, 4987, 1128, 1330, 1341, 1364, 1374, 1406, 1431, 1438, 1455, 1612, 1661, 1847, 1852, 1856, 1857, 1929, 1939, 2249, 2255, 2261, 2272, 2394, 2408, 2451, 2455, 2458, 2460, 2538, 2553, 2589, 2601, 2750, 2765, 2770, 2781, 2796, 2808, 3048, 3058, 3098, 3110, 3186, 3200, 3493, 3507, 3539, 3543, 3621, 3638, 3684, 3691, 3841, 3847, 3991, 3996, 4013, 4025, 4029, 4072, 4089, 4092, 4104, 4245, 4255, 4379, 4387, 4538, 4544, 4558, 4572, 4599, 4611, 4632, 4639, 4652, 4670, 4771, 4785, 4876, 4881, 4890, 4897, 4902, 1230, 1237, 1239, 1268, 1778, 1886, 1895, 2036, 2043, 2066, 2186, 2292, 2303, 2324, 2327, 2552, 3129, 3136, 3206, 3215, 3232, 3239, 3293, 3314, 3338, 3345, 4671, 4678, 4801, 4809, 4834, 4845, 4899, 4903, 1177, 1192, 1345, 1353, 1408, 1418, 1475, 1491, 1495, 1500, 1835, 1842, 1954, 1962, 1988, 1994, 2040, 2048, 2095, 2100, 2106, 2107, 2111, 2113, 2136, 2144, 2160, 2226, 2297, 2309, 2346, 2429, 2431, 2517, 2530, 2706, 2720, 2753, 2766, 2888, 2893, 2910, 2913, 2925, 3028, 3069, 3078, 3113, 3132, 3146, 3218, 3228, 3238, 3251, 3595, 3599, 3630, 3641, 3746, 3770, 3828, 3845, 3850, 3932, 3940, 4099, 4291, 4304, 4478, 4489, 4605, 4618, 4733, 4745, 4772, 4778, 4790, 4802, 4803, 4812, 4817, 4822, 4870, 4877, 4992, 1060, 1068, 1071, 1859, 1861, 3247, 3280, 3281, 3400, 3416, 3417, 3563, 3574, 3661, 4101, 4110, 4113, 4169, 4268, 4277, 4665, 9995, 1039, 1059, 1426, 1428, 1439, 1460, 1537, 1556, 1574, 1580, 1703, 1705, 1909, 1930, 1938, 2003, 2122, 2123, 2205, 2207, 2215, 2217, 2218, 2220, 2371, 2475, 2486, 2543, 2547, 2556, 2837, 2853, 2868, 2873, 2878, 2984, 3000, 3143, 3147, 3158, 3194, 3217, 3292, 3297, 3309, 3325, 3569, 3580, 3701, 3712, 3714, 3730, 3911, 4070, 4154, 4258, 4430, 4449, 4495, 4504, 4567, 4586, 4701, 4705, 4732, 4743, 4923, 4937, 1040, 1286, 1289, 1292, 1308, 1318, 1321, 1366, 1422, 1432, 1507, 1509, 1532, 1591, 1651, 1667, 1683, 1695, 1819, 1824, 1870, 1881, 1957, 1964, 2010, 2119, 2129, 2139, 2140, 2243, 2296, 2311, 2337, 2351, 2409, 2435, 2503, 2506, 2512, 2519, 2546, 2559, 2600, 2614, 2633, 2640, 2813, 2814, 2819, 2833, 2834, 2906, 2923, 3044, 3070, 3073, 3398, 3406, 3513, 3532, 3656, 3663, 3669, 3679, 3698, 3705, 3837, 3839, 3849, 3853, 3860, 3871, 3973, 3995, 4055, 4065, 4074, 4129, 4142, 4151, 4156, 4158, 4174, 4381, 4391, 4418, 4684, 4744, 4753, 4811, 4819, 4838, 4856, 4867, 4879, 4955, 4969, 1181, 1191, 1233, 1236, 1278, 1323, 1335, 1437, 1447, 1452, 1459, 1512, 1518, 1520, 1583, 1593, 1701, 1713, 1811, 1813, 2019, 2026, 2211, 2222, 2231, 2345, 2454, 2474, 2570, 2597, 2661, 2677, 2736, 2782, 2799, 2825, 2840, 2841, 2846, 2905, 2922, 3157, 3166, 3174, 3182, 3312, 3330, 3494, 3502, 3505, 3517, 3519, 3527, 3538, 3544, 3566, 3759, 3771, 3772, 3786, 3813, 3825, 3957, 3977, 3981, 3993, 4192, 4203, 4230, 4464, 4474, 4532, 4540, 4582, 4587, 4610, 4615, 4711, 4721, 4989, 1089, 1093, 1094, 1173, 1767, 1787, 1991, 1183, 1211, 1472, 1917, 1919, 1935, 1937, 2387, 2602, 2606, 2617, 2626, 2704, 2716, 2741, 2760, 4549, 4566, 4576, 4578, 4696, 4697, 4709, 4971, 1119, 1130, 1340, 1360, 1383, 1443, 1451, 1463, 1474, 1508, 1527, 1595, 1605, 1610, 1678, 1748, 1755, 1953, 1968, 1981, 2090, 2092, 2101, 2149, 2170, 2221, 2235, 2331, 2336, 2535, 2746, 2747, 2763, 2792, 2803, 2854, 2864, 3052, 3055, 3063, 3072, 3082, 3290, 3302, 3313, 3322, 3384, 3717, 3971, 3980, 4047, 4141, 4152, 4157, 4170, 4213, 4227, 4624, 4635, 4961, 4966, 4982, 1257, 1259, 1260, 1279, 1343, 1344, 1669, 2032, 2737, 2743, 2744, 3371, 3386, 3893, 3910, 4716, 4748, 4815, 4832, 4833, 1256, 1114, 1118, 1168, 1172, 1180, 1375, 1453, 1555, 1688, 1700, 1741, 1757, 1985, 2074, 2087, 2306, 2315, 2462, 2548, 2578, 2636, 2696, 2703, 2718, 2719, 2754, 2866, 2875, 3029, 3225, 3234, 3525, 3535, 3741, 3749, 3898, 3918, 4266, 4281, 4293, 4414, 4422, 4523, 4545, 4551, 4724, 4736, 4968, 4981, 1243, 1249, 1252, 1504, 1513, 1645, 1675, 1676, 1759, 1780, 1830, 1850, 2033, 2045, 2068, 2072, 2128, 2142, 2247, 2256, 2524, 2541, 2857, 2877, 2889, 3101, 3246, 3269, 3272, 3279, 3883, 3888, 3902, 3924, 3936, 4453, 4465, 4557, 1349, 1357, 1567, 1579, 1604, 1606, 1621, 1643, 1656, 1733, 1891, 1983, 1996, 2051, 2064, 2179, 2181, 2191, 2193, 2274, 2276, 2277, 2359, 2373, 2386, 2399, 2443, 2473, 2494, 2510, 2587, 2879, 2884, 2885, 3050, 3062, 3087, 3100, 3131, 3138, 3153, 3155, 3167, 3249, 3263, 3299, 3310, 3319, 3328, 3335, 3347, 3441, 3514, 3577, 3636, 3644, 3747, 3773, 3830, 3842, 4056, 4064, 4088, 4119, 4127, 4182, 4186, 4226, 4271, 4280, 4421, 4438, 4627, 4628, 4662, 4667, 4770, 4935, 4942, 4974, 1034, 1035, 1036, 1037, 1038, 1041, 1042, 1043, 1044, 1045, 1046, 1047, 1048, 1049, 1050, 1051, 1052, 1053, 1054, 1055, 1056, 1057, 1058, 1062, 1063, 1064, 1065, 1066, 1067, 1069, 1070, 1072, 1073, 1075, 1076, 1077, 1079, 1081, 1082, 1083, 1084, 1085, 1088, 1090, 1092, 1095, 1096, 1097, 1098, 1099, 1100, 1102, 1103, 1104, 1105, 1106, 1108, 1109, 1110, 1111, 1112, 1113, 1115, 1116, 1117, 1120, 1121, 1122, 1123, 1124, 1125, 1126, 1127, 1129, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144, 1145, 1146, 1147, 1148, 1149, 1150, 1151, 1152, 1153, 1154, 1155, 1156, 1157, 1158, 1159, 1160, 1161, 1162, 1163, 1164, 1165, 1166, 1061, 1086, 1107, 1131, 1167, 1169, 1171, 1420, 1868, 2053, 2484, 2491, 2544, 2557, 2567, 2577, 2593, 3202, 3273, 3288, 3300, 3504, 3523, 3592, 3651, 3667, 3674, 4161, 4171, 4383, 4392, 4393, 4401, 4839, 4850, 1217, 1240, 1254, 1277, 1281, 1337, 1347, 1523, 1557, 1568, 1598, 1613, 1616, 1624, 1682, 1760, 1764, 1772, 1826, 1845, 1865, 1959, 1969, 2007, 2080, 2104, 2116, 2138, 2166, 2175, 2176, 2183, 2329, 2385, 2426, 2447, 2576, 2657, 2820, 2874, 2896, 2908, 2950, 2956, 3102, 3106, 3111, 3237, 3255, 3303, 3307, 3324, 3362, 3380, 3474, 3590, 3612, 3622, 3639, 3680, 3782, 3794, 3824, 3836, 4035, 4049, 4324, 4512, 4646, 4676, 4681, 4718, 4723, 4737, 4741, 4763, 4823, 4943, 1307, 1320, 1332, 1333, 1342, 1348, 1371, 1402, 1522, 1560, 1632, 1653, 1710, 1723, 2418, 2463, 2771, 2794, 2871, 3198, 3209, 3331, 3616, 3640, 3657, 3735, 3752, 3753, 3755, 3761, 3787, 3815, 4302, 4407, 4427, 4483, 4767, 4786, 4924, 1207, 1224, 1225, 1241, 1264, 1280, 1319, 1322, 1365, 1376, 1945, 1956, 2358, 2891, 3095, 3385, 3401, 3542, 3548, 4363, 4372, 4390, 4775, 1197, 1214, 1228, 1231, 1339, 1398, 1414, 1477, 1529, 1530, 1540, 1541, 1549, 1558, 1559, 1570, 1615, 1673, 1681, 1781, 1790, 1928, 1931, 2034, 2153, 2168, 2194, 2368, 2383, 2596, 2616, 2728, 2811, 2869, 2970, 2985, 3039, 3054, 3085, 3086, 3105, 3149, 3161, 3172, 3183, 3189, 3382, 3411, 3478, 3614, 3620, 3974, 3986, 4037, 4050, 4082, 4140, 4144, 4206, 4208, 4264, 4269, 4394, 4409, 4443, 4585, 4591, 4661, 4669, 4765, 4788, 4799, 4807, 4958, 1271, 1274, 1910, 1922, 2445, 2629, 2648, 2679, 2698, 2947, 2951, 2953, 2955, 2963, 2979, 2986, 3265, 3664, 4869, 4886, 4888, 4911, 1179, 1248, 1356, 1367, 1806, 1814, 1818, 1828, 1951, 1965, 1966, 1970, 1975, 1976, 2038, 2050, 2083, 2313, 2537, 2689, 2694, 2734, 3013, 3034, 3093, 3170, 3370, 3387, 3623, 3635, 3682, 3683, 3689, 4433, 4446, 4454, 4768, 4846, 4865, 4885, 4891, 4907, 4908, 1170
Win-2Kf Files
Win-2Kf Processes
Win-2Kf Registries
Win-2Kf Ports
Create Events
Create Files
Create RegKeys
Open RegKeys
Service Starts
Service Deletes
Service Creates
Cluster
Cluster Confidence
Packer ID1	none
Packer ID2	none
Embedded DNS
String Count	60
String Link	text
String MD5	5961478c0e29e92aea0e29effe92b140
Timerange	365 Days
Unpack Status	unknown (unpacked : 0 : Unpacking Provided Binary. (Code,Data) = (73.37%, 20.43%))
Countries	14
Unpacked Link
Callgraph
API Resolution
Comment	none