anubis left
Anubis - Analysis Report
anubis right

Analysis Report for 40989494

 Comment on this report

Summary:

Description Risk
AV Hit: This executable is detected by an antivirus software. high


Table of Contents
expand all expand all   collapse all collapse all

1. General Information

  - Information about Anubis' invocation  
Time needed: 240 s 
Report created: 02/25/11, 15:11:00 UTC 
Termination reason: Timeout 
Program version: 1.74.3362 

2. 40989494.exe

  - General information about this executable  
Analysis Reason: Primary Analysis Subject 
Filename: 40989494.exe 
MD5: efb533e82daab0aec001dfd2eb3572f6 
SHA-1: c302cf7651551d1af5a9e9d3e1c8efcb901fc768 
File Size: 110715 Bytes
Command Line: "C:\40989494.exe"  
Process-status at analysis end: alive 
Exit Code: 0 

  - Load-time Dlls  
Module Name Base Address Size
C:\​WINDOWS\​system32\​ntdll.dll  0x7C900000  0x000AF000 
C:\​WINDOWS\​system32\​kernel32.dll  0x7C800000  0x000F6000 

  - Ikarus Virus Scanner  
Worm.Win32.Rimecud (Sig-Id:1470912)

2.a) 40989494.exe - File Activities


International Secure Systems Lab
Vienna University of Technology, Eurecom France, UC Santa Barbara
Contact: anubis@iseclab.org