W32/Gamarue-AN exhibits the following characteristics:
File Information
- Size
- 32K
- SHA-1
- 81a1addead705d6e6844ad61961bb75967325511
- MD5
- 534169906110364f325bdfb63b1aa144
- CRC-32
- a9cd8b0f
- File type
- application/x-ms-dos-executable
- First seen
- 2013-03-04
Runtime Analysis
Copies Itself To
- C:\Documents and Settings\All Users\svchost.exe
Registry Keys Created
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- SunJavaUpdateSched
- C:\Documents and Settings\All Users\svchost.exe