Packed MD5 5285741560bc82342a6c28db536711b6 
Priority 28 
First 06/10/2009 
Last 11/05/2009 
Count  
History  
Unpacked MD5 60590b8b67630fa81365c465193837c0  
AV Hits 37 
AV Count 32 
CC Servers  
DNS Lookups  
Failed Connects  
AV Name AhnLab-V3:Virut.B, AntiVir:Virut.AX, Authentium:Sasser.E, Avast:_Virtob, AVG:I-Sasser.E, BitDefender:Generic.24440, CAT-QuickHeal:Virut.Z, ClamAV:Sasser.H, DrWeb:Virut.30, eSafe:MISSED, eTrust-Vet:Virut.7115, Ewido:MISSED, FileAdvisor:MISSED, Fortinet:Virut.AV, F-Prot:Sasser.E, F-Secure:Sasser.D, Ikarus:Email-Plexus.E, Kaspersky:Virut.av, McAfee:Virut.gen.a, Microsoft:Virut.AC, NOD32v2:MISSED, Norman:Sasser.E, Panda:Sasser.E.worm, Prevx1:MISSED, Rising:Virut.an, Sophos:Virut-W, Sunbelt:MISSED, Symantec:Virut.W, TheHacker:Virut.av, VBA32:Virut.2, VirusBuster:Sasser.E, Webwasher-Gateway:MISSED  
WinXP Files 12785_upload.exe, 13140_upload.exe, 24806_upload.exe, 7305_upload.exe, lsasss.exe, 10009_upload.exe, 21447_upload.exe, 24120_upload.exe, 26225_upload.exe, 27419_upload.exe, 28621_upload.exe, 3865_upload.exe, 9557_upload.exe, 9713_upload.exe, 10226_upload.exe, 11113_upload.exe, 13754_upload.exe, 13795_upload.exe, 14022_upload.exe, 1417_upload.exe, 15235_upload.exe, 16489_upload.exe, 16957_upload.exe, 17815_upload.exe, 19743_upload.exe, 20550_upload.exe, 22094_upload.exe, 22528_upload.exe, 22641_upload.exe, 24635_upload.exe, 26644_upload.exe, 27390_upload.exe, 30837_upload.exe, 31572_upload.exe, 32674_upload.exe, 32725_upload.exe, 623_upload.exe, 6283_upload.exe, 8844_upload.exe, 9317_upload.exe, 14029_upload.exe, 15182_upload.exe, 15898_upload.exe, 17723_upload.exe, 20366_upload.exe, 23080_upload.exe, 29131_upload.exe, 31348_upload.exe, 32029_upload.exe, 9725_upload.exe, 23105_upload.exe, 12561_upload.exe, 13019_upload.exe, 15438_upload.exe, 16508_upload.exe, 18470_upload.exe, 18948_upload.exe, 18_upload.exe, 19082_upload.exe, 20693_upload.exe, 21479_upload.exe, 21703_upload.exe, 23806_upload.exe, 25755_upload.exe, 30614_upload.exe, 31012_upload.exe, 31143_upload.exe, 31307_upload.exe, 712_upload.exe, 8050_upload.exe, 8282_upload.exe, 917_upload.exe, 11232_upload.exe, 11509_upload.exe, 12814_upload.exe, 16419_upload.exe, 16795_upload.exe, 17040_upload.exe, 18981_upload.exe, 19518_upload.exe, 2643_upload.exe, 28377_upload.exe, 29471_upload.exe, 6285_upload.exe, 9201_upload.exe, 15028_upload.exe, 19463_upload.exe, 20878_upload.exe, 26266_upload.exe, 26825_upload.exe, 28692_upload.exe, 10560_upload.exe, 16968_upload.exe, 21243_upload.exe, 22326_upload.exe  
WinXP Processes CMD.EXE, CSRSS.EXE, EXPLORER.EXE, ftp.exe, LSASS.EXE, lsasss.exe, MSMSGS.EXE, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE, dwwin.exe, 23105_upload.exe  
WinXP Registries HKEY_LOCAL_MACHINE@...Reliability\\UserDefined  
WinXP Ports 1022, 1023, 1026, 1321, 1328, 1329, 1331, 1332, 1334, 1336, 1337, 1338, 1339, 1340, 1344, 1345, 1348, 1349, 1352, 1355, 1360, 1371, 1372, 1373, 1374, 1375, 1379, 1383, 1385, 1387, 1391, 1393, 1394, 1395, 1397, 1402, 1410, 1411, 1412, 1414, 1416, 1417, 1419, 1420, 1421, 1423, 1424, 1427, 1428, 1432, 1437, 1445, 1446, 1448, 1449, 1452, 1459, 1460, 1461, 1463, 1466, 1468, 1469, 1474, 1479, 1483, 1484, 1485, 1486, 1490, 1492, 1495, 1496, 1497, 1500, 1502, 1503, 1507, 1036, 1050, 1494, 1399, 1403, 1404, 1408, 1409, 1413, 1418, 1429, 1433, 1435, 1438, 1440, 1457, 1458, 1464, 1467, 1471, 1477, 1478, 1480, 1481, 1491, 1493, 1498, 1508, 1511, 1514, 1517, 1518, 1520, 1521, 1522, 1523, 1525, 1526, 1528, 1530, 1532, 1533, 1535, 1537, 1539, 1541, 1543, 1544, 1553, 1565, 1566, 1568, 1571, 1573, 1574, 1575, 1577, 1582, 1589, 1590, 1591, 1595, 1597, 1598, 1599, 1600, 1601, 1603, 1033, 1034, 1602, 1625, 1641, 1642, 1644, 1649, 1650, 1651, 1653, 1655, 1660, 1661, 1663, 1668, 1669, 1670, 1671, 1673, 1675, 1680, 1682, 1683, 1684, 1690, 1693, 1694, 1695, 1696, 1700, 1702, 1703, 1710, 1712, 1713, 1715, 1718, 1722, 1723, 1725, 1730, 1731, 1732, 1736, 1737, 1741, 1742, 1743, 1745, 1746, 1747, 1748, 1035, 1040, 1749, 1265, 1271, 1272, 1275, 1277, 1281, 1282, 1286, 1287, 1289, 1290, 1291, 1292, 1293, 1296, 1297, 1299, 1302, 1304, 1305, 1311, 1320, 1325, 1326, 1330, 1342, 1350, 1354, 1359, 1364, 1365, 1366, 1368, 1370, 1376, 1377, 1380, 1381, 1388, 1389, 1415, 1425, 1426, 1430, 1442, 1453, 1462, 1470, 1472, 1475, 1489, 1501, 1506, 1509, 1510, 1512, 1042, 1043, 1086, 1382, 1386, 1400, 1405, 1434, 1439, 1443, 1450, 1454, 1455, 1465, 1488, 1513, 1516, 1519, 1527, 1529, 1531, 1538, 1542, 1545, 1546, 1549, 1550, 1554, 1558, 1559, 1563, 1570, 1579, 1581, 1585, 1586, 1587, 1593, 1605, 1609, 1610, 1611, 1612, 1613, 1614, 1615, 1482, 1487, 1505, 1515, 1536, 1547, 1548, 1556, 1561, 1562, 1564, 1576, 1578, 1588, 1596, 1604, 1606, 1607, 1608, 1617, 1618, 1619, 1620, 1623, 1629, 1630, 1631, 1633, 1635, 1636, 1645, 1647, 1648, 1654, 1037, 1652, 1808, 1811, 1820, 1821, 1825, 1826, 1830, 1831, 1832, 1833, 1837, 1838, 1840, 1841, 1844, 1849, 1854, 1855, 1859, 1861, 1862, 1864, 1865, 1867, 1868, 1870, 1871, 1872, 1873, 1874, 1876, 1878, 1883, 1885, 1887, 1889, 1891, 1892, 1900, 1912, 1913, 1917, 1918, 1919, 1921, 1923, 1924, 1926, 1927, 1928, 1929, 1930, 1932, 1933, 1935, 1936, 1938, 1941, 1944, 1945, 1949, 1950, 1952, 1954, 1962, 1976, 1977, 1978, 1980, 1986, 1987, 1989, 1990, 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2001, 2002, 2010, 2011, 2017, 2022, 2026, 2030, 2031, 2032, 2033, 2037, 2039, 2041, 2042, 2047, 2051, 2052, 2056, 2057, 2059, 2060, 2063, 2070, 2074, 2075, 2077, 2078, 2079, 2081, 2082, 2083, 2084, 2091, 1238, 1247, 1248, 1249, 1252, 1254, 1256, 1257, 1258, 1259, 1261, 1262, 1264, 1266, 1268, 1269, 1274, 1276, 1280, 1283, 1301, 1306, 1307, 1308, 1309, 1313, 1314, 1315, 1316, 1318, 1319, 1322, 1324, 1361, 1378, 1390, 1441, 1444, 1451, 1473, 1038, 1161, 1170, 1171, 1174, 1175, 1181, 1184, 1185, 1187, 1188, 1190, 1191, 1192, 1197, 1198, 1199, 1204, 1209, 1210, 1214, 1216, 1217, 1219, 1220, 1221, 1222, 1224, 1234, 1237, 1240, 1241, 1243, 1244, 1245, 1246, 1251, 1253, 1260, 1267, 1278, 1295, 1300, 1303, 1312, 1039  
Win-2Kf Files  
Win-2Kf Processes  
Win-2Kf Registries  
Win-2Kf Ports  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 none 
Packer ID2 none 
Embedded DNS  
String Count 59 
String Link text
String MD5 136bbafe8395aa302dad114efc1e8bd5 
Timerange 365 Days 
Unpack Status unknown (unpacked : 0 : Unpacking Provided Binary. (Code,Data) = (82.74%, 13.33%)) 
Countries 2 
Unpacked Link  
Callgraph  
API Resolution  
Comment none