Examples of W32/VBNA-AI include:
Example 1
File Information
- Size
- 208K
- SHA-1
- 3c609ed181b67beaf91207b9c50f6babde14638c
- MD5
- f806ec68ec5b3f446ffdd766a84999a9
- CRC-32
- d4bb518d
- File type
- Windows executable
- First seen
- 2012-11-15
Example 2
File Information
- Size
- 208K
- SHA-1
- 63bc52b2e3c250590057b33acd0da34aa4cbe5bf
- MD5
- 5f4c8fb8a7c83fe38ce801ffa401d63a
- CRC-32
- 7a534e1a
- File type
- Windows executable
- First seen
- 2012-11-14
Example 3
File Information
- Size
- 208K
- SHA-1
- 79c6ca19db7cb32174fee1c0b56e3ee67b622ec2
- MD5
- ae256b89668abcadf7068278d40ae4cf
- CRC-32
- 075f1273
- File type
- Windows executable
- First seen
- 2012-11-01
Runtime Analysis
Dropped Files
- F:/Passwords.exe
- Size
- 208K
- SHA-1
- 9ea634839668906a3dee65fcdbebb1c161a54240
- MD5
- bd963792494e259248b20be017256d9f
- CRC-32
- 30c6edb0
- File type
- Windows executable
- First seen
- 2012-11-02
- F:/piecu.exe
- Size
- 208K
- SHA-1
- 9ea634839668906a3dee65fcdbebb1c161a54240
- MD5
- bd963792494e259248b20be017256d9f
- CRC-32
- 30c6edb0
- File type
- Windows executable
- First seen
- 2012-11-02
- F:/Porn.exe
- Size
- 208K
- SHA-1
- 9ea634839668906a3dee65fcdbebb1c161a54240
- MD5
- bd963792494e259248b20be017256d9f
- CRC-32
- 30c6edb0
- File type
- Windows executable
- First seen
- 2012-11-02
- c:\Documents and Settings\test user\piecu.exe
- Size
- 208K
- SHA-1
- 73a770762c589ac382e31898db4c0a7b4e471995
- MD5
- 3a986f26d5ae4a27aaa80b54cfcdf014
- CRC-32
- 485d9274
- File type
- Windows executable
- First seen
- 2012-11-02
- F:/Sexy.exe
- Size
- 208K
- SHA-1
- 9ea634839668906a3dee65fcdbebb1c161a54240
- MD5
- bd963792494e259248b20be017256d9f
- CRC-32
- 30c6edb0
- File type
- Windows executable
- First seen
- 2012-11-02
- F:/Secret.exe
- Size
- 208K
- SHA-1
- 9ea634839668906a3dee65fcdbebb1c161a54240
- MD5
- bd963792494e259248b20be017256d9f
- CRC-32
- 30c6edb0
- File type
- Windows executable
- First seen
- 2012-11-02
Registry Keys Created
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run
- piecu
- c:\Documents and Settings\test user\piecu.exe /g
- HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
- NoAutoUpdate
- 0x00000001
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- piecu
- c:\Documents and Settings\test user\piecu.exe /j
- HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
- Run
- c:\Documents and Settings\test user\piecu.exe /o
Registry Keys Modified
- HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
- ShowSuperHidden
- 0x00000000
Processes Created
- c:\Documents and Settings\test user\piecu.exe
DNS Requests
- ns1.helpupdater.net
- ns1.helpupdates.com