|
Summary:
|
Description
|
Risk
|
| AV Hit: This executable is detected by an antivirus software.
|
|
|
|
| Time needed: |
251 s |
| Report created: |
05/10/11, 05:23:29 UTC |
| Termination reason: |
Timeout |
| Program version: |
1.75.3394 |
|
|
|
| Analysis Reason: |
Primary Analysis Subject |
| Filename: |
48922832.exe |
| MD5: |
ebaf4c1059c2166ff6482decd0533d43 |
| SHA-1: |
d5dbd762a2c6f8e187ee459119f77b90c69fc506 |
| File Size: |
106496 Bytes |
| Command Line: |
"C:\48922832.exe" |
| Process-status at analysis end: |
alive |
| Exit Code: |
0 |
|
|
|
|
Module Name
|
Base Address
|
Size
|
| C:\WINDOWS\system32\ntdll.dll
|
0x7C900000 |
0x000AF000 |
| C:\WINDOWS\system32\kernel32.dll
|
0x7C800000 |
0x000F6000 |
|
|
|
|
Module Name
|
Base Address
|
Size
|
| C:\WINDOWS\system32\advapi32.dll
|
0x77DD0000 |
0x0009B000 |
| C:\WINDOWS\system32\RPCRT4.dll
|
0x77E70000 |
0x00092000 |
| C:\WINDOWS\system32\Secur32.dll
|
0x77FE0000 |
0x00011000 |
|
|
|
| Worm.Win32.Rimecud (Sig-Id:1562842) |
|
|
|
|
File
|
Control Code
|
Times
|
| C:\Program Files\Common Files\ |
0x00090028 |
1 |
|
|
|
expand all
