Examples of Troj/GameSpy-C include:
Example 1
File Information
- Size
- 91K
- SHA-1
- 2cc9f88ec25d9d7fb347982cfceb7cdf276d0f5d
- MD5
- 3507313943be4f344ee785c60a0ab074
- CRC-32
- 8952de57
- File type
- Windows executable
- First seen
- 2012-09-28
Other vendor detection
- Avira
- HEUR/Malware
- Kaspersky
- HEUR:Trojan.Win32.Generic
Example 2
File Information
- Size
- 96K
- SHA-1
- 4b67b25ed0850911fd384ea22dc0022477f6c2bd
- MD5
- f866433a78dcfc8f9fb32cdcb480f568
- CRC-32
- 42d588c5
- File type
- Windows executable
- First seen
- 2012-09-16
Other vendor detection
- Avira
- TR/Crypt.XPACK.Gen
- Kaspersky
- HEUR:Trojan.Win32.Generic
- Trend
- PAK_Generic.001
Runtime Analysis
Dropped Files
- C:\WINDOWS\system32\ws2help.dll.IrWR.tmp
- C:\WINDOWS\system32\ws2helpxp.dll
Modified Files
- %SYSTEM%\ws2help.dll
- Changed the file contents
- Set the system and archive flags
Processes Created
- c:\windows\system32\cmd.exe
Example 3
File Information
- Size
- 88K
- SHA-1
- 5aa82ba17120cc222fc78e9e6235b2fbe9e433d3
- MD5
- 45bdc73d3c1338595e2637cfbe6cc73a
- CRC-32
- 6a8450fd
- File type
- Windows executable
- First seen
- 2013-01-02
Other vendor detection
- Avira
- TR/Dropper.Gen
- Kaspersky
- HEUR:Trojan.Win32.AntiAV