Packed MD5 03f912899b3d90f9915d72fc9abb91be 
Priority 8 
First 06/19/2009 
Last 11/05/2009 
Count  
History  
Unpacked MD5  
AV Hits 32 
AV Count 32 
CC Servers  
DNS Lookups  
Failed Connects  
AV Name AhnLab-V3:Sasser.16384, AntiVir:Sasser.D, Authentium:Sasser.D, Avast:_Sasser-D, AVG:Generic.BG, BitDefender:Sasser.D, CAT-QuickHeal:Sasser.D, ClamAV:Sasser.D, DrWeb:HLLW.Jobaka.4, eSafe:Sasser.d, eTrust-Vet:Sasser.D, Ewido:Sasser.c, FileAdvisor:MISSED, Fortinet:Sasser.D!worm, F-Prot:Sasser.D, F-Secure:Sasser.c, Ikarus:Email-Plexus, Kaspersky:Sasser.c, McAfee:Sasser.d, Microsoft:Sasser.dam, NOD32v2:Sasser.D, Norman:Sasser.D, Panda:Sasser.D.worm, Prevx1:Generic.Malware, Rising:Sasser.d, Sophos:Sasser-D, Sunbelt:MISSED, Symantec:Sasser.D, TheHacker:Sasser.gen.worm, VBA32:Sasser.c, VirusBuster:Sasser.D, Webwasher-Gateway:Malware.gen  
WinXP Files 26037_up.exe, skynetave.exe  
WinXP Processes 26037_up.exe, CMD.EXE, CSRSS.EXE, EXPLORER.EXE, LSASS.EXE, MSMSGS.EXE, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE  
WinXP Registries  
WinXP Ports 1379, 1380, 1383, 1384, 1389, 1390, 1391, 1393, 1399, 1400, 1403, 1404, 1409, 1410, 1414, 1415, 1419, 1420, 1423, 1424, 1429, 1430, 1434, 1435, 1439, 1440, 1441, 1443, 1445, 1446, 1448, 1449, 1451, 1452, 1457, 1458, 1464, 1465, 1468, 1469, 1471, 1472, 1477, 1478, 1483, 1485, 1487, 1488, 1490, 1491, 1492, 1494, 1496, 1497, 1503, 1504, 1507, 1508, 1511, 1513, 1516, 1518, 1526, 1529, 1533, 1534, 1536, 1537, 1542, 1544, 1547, 1548, 1549, 1552, 1554, 1555, 1564, 1566, 1568, 1569, 1570, 1572, 1574, 1575, 1576, 1578, 1583, 1584, 1586, 1588, 1590, 1592, 1594, 1595, 1601, 1602, 1613, 1614, 1621, 1622, 1625, 1626, 1629, 1630, 1632, 1633, 1634, 1636, 1641, 1642, 1649, 1650, 1654, 1656, 1659, 1660, 1662, 1664, 1666, 1667, 1669, 1671, 1672, 1674, 1677, 1679, 1680, 1682, 1685, 1687, 1689, 1690, 1693, 1694, 1696, 1699, 1703, 1704, 1712, 1714, 1719, 1720, 1722, 1723, 1724, 1728, 1730, 1732, 1735, 1737, 1741, 1743, 1746, 1747, 1753, 1754, 1755, 1758, 1763, 1764, 1766, 1768, 1773, 1774, 1776, 1780, 1782, 1783, 1786, 1788, 1792, 1795, 1798, 1801, 1803, 1804, 1808, 1810, 1812, 1813, 1817, 1819, 1821, 1822, 1826, 1827, 1831, 1832, 1834, 1836, 1838, 1839, 1847, 1849, 1854, 1856, 1860, 1861, 1866, 1867, 1871, 1873, 1876, 1877, 1880, 1881, 1885, 1886, 1890, 1892, 1894, 1896, 1898, 1900, 1904, 1906, 1908, 1910, 1913, 1916, 1919, 1920, 1923, 1925, 1927, 1930, 1936, 1937, 1943, 1944, 1950, 1951, 1954, 1956, 1959, 1960, 1962, 1964, 1966, 1967, 1971, 1972, 1974, 1975, 1977, 1979, 1991, 1994, 1998, 1999, 2001, 2002, 2005, 2007, 2010, 2011, 2013, 2014, 2016, 2017, 2022, 2024, 2026, 2027, 2030, 2031, 2034, 2035, 2037, 2038, 2041, 2042, 2044, 2045, 2047, 2048, 2054, 2057, 2061, 2063, 2077, 2078, 2079, 2080, 2081, 2082, 2083, 2084, 5554, 9995  
Win-2Kf Files  
Win-2Kf Processes  
Win-2Kf Registries  
Win-2Kf Ports  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 none 
Packer ID2 none 
Embedded DNS  
String Count 64 
String Link text
String MD5 a6e25e6dc2bc68c8df330fb276d7028c 
Timerange 365 Days 
Unpack Status unknown (unpacked : 0 : Unpacking Provided Binary. (Code,Data) = (73.50%, 20.39%)) 
Countries 8 
Unpacked Link  
Callgraph  
API Resolution  
Comment none