Examples of Troj/FakeVLC-A include:
Example 1
File Information
- Size
- 631K
- SHA-1
- 2b7edb9469a0f914d3e71f4a2c8419f2b32f658b
- MD5
- 40382784979d1b1f9cc7661d8308f3ca
- CRC-32
- b19fb88d
- File type
- application/x-ms-dos-executable
- First seen
- 2011-04-08
Example 2
File Information
- Size
- 955K
- SHA-1
- ab8d0b9de594c0d54fe2180a41ce3c82d7d832d2
- MD5
- 682e9de061f4fb6d098779f501fe250b
- CRC-32
- fdacacad
- File type
- application/x-ms-dos-executable
- First seen
- 2011-04-08
Runtime Analysis
Dropped Files
- c:\Documents and Settings\test user\Local Settings\Temp\test.txt
- Size
- 198
- SHA-1
- 79f80588b6b35330176ea09d0af24ecb70b43429
- MD5
- 0bd85478354eb74952763f026c8d5c82
- CRC-32
- dce89e96
- File type
- application/octet-stream
- First seen
- 2011-04-08
- c:\Documents and Settings\test user\Local Settings\Temp\Extract.bat
- Size
- 86
- SHA-1
- 3e8c3f1d58732d218e4766111cbe6554a8ff7cfd
- MD5
- 801a28d2941321fa9f6b6bc4dadf2007
- CRC-32
- d81d8ae1
- File type
- application/octet-stream
- First seen
- 2011-04-04
- c:\Documents and Settings\test user\Local Settings\Temp\OfferBoxSetup.exe
- Size
- 175K
- SHA-1
- 431350f9631ebfe19450010aefe6b344d7bfdab8
- MD5
- 92b06db4954ce9212c4c30b43dda8888
- CRC-32
- e229e2b6
- File type
- application/x-ms-dos-executable
- First seen
- 2011-04-01
- c:\Documents and Settings\test user\Local Settings\Temp\vlc-1.1.8-win32.exe
- c:\Documents and Settings\test user\Local Settings\Temp\vlc.7z
- Size
- 334K
- SHA-1
- ab14e9f2d53b20b9dc894c40b572252aba7d77a2
- MD5
- 2573f1782e373b28446bd8fcbac8921c
- CRC-32
- b0b0ee52
- File type
- application/octet-stream
- First seen
- 2011-04-08
- c:\Documents and Settings\test user\Local Settings\Temp\7za.exe
- Size
- 574K
- SHA-1
- cee178da1fb05f99af7a3547093122893bd1eb46
- MD5
- 42badc1d2f03a8b1e4875740d3d49336
- CRC-32
- 1a160d6b
- File type
- application/x-ms-dos-executable
- First seen
- 2011-01-03
- c:\Documents and Settings\test user\Local Settings\Temp\install.ini
- Size
- 904
- SHA-1
- 1b0052c97ce8b7510dc0dd043da3457e40640f3b
- MD5
- 3aa0b97dbb68e2817293a96cf3a78229
- CRC-32
- 1717e60e
- File type
- application/octet-stream
- First seen
- 2011-04-04
- c:\Documents and Settings\test user\Local Settings\Temp\OB_InstallerWindow_FR.bmp
- Size
- 382K
- SHA-1
- cc2def35f4ec514fb8d5b20a34d3a937f4842f60
- MD5
- 1492de9e2b26e09b6acef31aa630fab1
- CRC-32
- f1ab3913
- File type
- image/x-bmp
- First seen
- 2011-04-01
- c:\Documents and Settings\test user\Local Settings\Temp\vlc-1.1.8-install.exe
- Size
- 631K
- SHA-1
- 2b7edb9469a0f914d3e71f4a2c8419f2b32f658b
- MD5
- 40382784979d1b1f9cc7661d8308f3ca
- CRC-32
- b19fb88d
- File type
- application/x-ms-dos-executable
- First seen
- 2011-04-08
Registry Keys Created
- HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- GlobalUserOffline
- 0x00000000
- HKCU\Software\WinRAR SFX
- C%%DOCUME~1%support%LOCALS~1%Temp
- C:\DOCUME~1\support\LOCALS~1\Temp
Processes Created
- c:\docume~1\support\locals~1\temp\7za.exe
- c:\docume~1\support\locals~1\temp\vlc-1.1.8-install.exe
- c:\windows\system32\cmd.exe
HTTP Requests
- http://telechargement-vlc.com/AutoDL/vlc-1.1.8-win32.exe
DNS Requests