ThreatExpert Report: Net-Worm.Win32.Small

Technical Details:

File System Modifications

The following files were created in the system:

Filename(s)

File Size

File Hash

Alias

%Temp%\WINDOWS\TEMP\00000000.TXT

700 bytes

MD5: 0x45C6515D96F020ECE023EAFAEB76D781
SHA-1: 0x36C9C60A4F95E9E593B5C77C44036F4BE10735C4

(not available)

%Temp%\WINDOWS\TEMP\00000000.ZIP

207,717 bytes

MD5: 0xF85EE406C682A04F320D648AC514C23B
SHA-1: 0x5997DF2DA21E9B84C04B30807EC5963597712FC7

Net-Worm.Win32.Small [Ikarus]

%Temp%\WINDOWS\TEMP\NSD18C.tmp

1,361 bytes

MD5: 0x826C6870BE2375A999A98A0B0F10C7E3
SHA-1: 0x3EDCAA5E5F3B3B4F9058A5A614E0ADBEC2303CDD

(not available)

[file and pathname of the sample #1]

206,624 bytes

MD5: 0x509A83C0FE248D545F4E124A55AFFAEB
SHA-1: 0x4BE2D99653A413F3F3272D276143D7DAF38E5A2D

Net-Worm.Win32.Small [Ikarus]

Note:

%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

The following directories were created:

%Temp%\WINDOWS
%Temp%\WINDOWS\TEMP

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.

Submission Summary:

Technical Details: