W32/VB-GFV exhibits the following characteristics:
File Information
- Size
- 28K
- SHA-1
- c807478e66f9493a949638236cdcf738f3796370
- MD5
- ddf6bc8005bda9127f91cadca868f07c
- CRC-32
- fb9b9b9b
- File type
- Windows executable
- First seen
- 2011-04-25
Other vendor detection
- Kaspersky
- Trojan.Win32.Cosne.aaft
Runtime Analysis
Copies Itself To
- C:\New Folder (2).exe
- C:\WINDOWS\New Folder (2).exe
- F:/New Folder (2).exe
- c:\Documents and Settings\test user\Start Menu\Programs\Startup\New Folder (2).exe
Dropped Files
- c:\Documents and Settings\test user\Local Settings\Temp\~DF714.tmp
Processes Created