W32/Autorun-BWL exhibits the following characteristics:
File Information
- Size
- 32K
- SHA-1
- b836671e55837ca81dadbb3f5849a49e6e3bfdd6
- MD5
- 791b0d8d3b287338c6d136b4742961b1
- CRC-32
- 69e38d41
- File type
- application/x-ms-dos-executable
- First seen
- 2012-02-07
Runtime Analysis
Copies Itself To
- C:\WINDOWS\logonassistant.exe
Registry Keys Created
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run
- AprilFool
- C:\WINDOWS\logonassistant.exe