Analysis Report for [C]orp-51.exe

Comment on this report

Summary:

No threats could be detected by Anubis. This does not imply that execution of this executable is safe.

Table of Contents
expand all	collapse all
General information [C]orp-51..exe [C]orp-51..exe Primary Analysis Subject General Information a) Registry Activities b) File Activities c) Other Activities

1. General Information

	- Information about Anubis' invocation

Time needed:	267 s
Report created:	07/14/12, 11:07:44 UTC
Termination reason:	Timeout
Program version:	1.76.3886

2. [C]orp-51..exe

	- General information about this executable

Analysis Reason:	Primary Analysis Subject
Filename:	[C]orp-51..exe
MD5:	f3918d95fba71c10d95fb23f23bc540b
SHA-1:	e948942394516078564bc5c347d9a1041e283445
File Size:	81920 Bytes
Process-status at analysis end:	alive
Exit Code:	0

	- Load-time Dlls

Module Name	Base Address	Size
C:\WINDOWS\system32\ntdll.dll	0x7C900000	0x000AF000

2.a) [C]orp-51..exe - Registry Activities

	- Registry Values Read:

Key	Name	Value	Times
HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers	TransparentEnabled	1	1

2.b) [C]orp-51..exe - File Activities

	- File System Control Communication:

File	Control Code	Times
C:\Program Files\Common Files\	0x00090028	1

	- Memory Mapped Files:

File Name

C:\WINDOWS\system32\MSVBVM60.DLL

2.c) [C]orp-51..exe - Other Activities

	- Windows SEH exceptions:

Description	Times
Exception 0xc0000005 (STATUS_ACCESS_VIOLATION) at 0x7c917c11	1

International Secure Systems Lab
Vienna University of Technology, Eurecom France, UC Santa Barbara
Contact: anubis@iseclab.org