Submission Summary:

• Submission details:
• Submission received: 25 September 2012, 02:43:14
• Processing time: 7 min 51 sec
• Submitted sample:
• File MD5: 0xE9803911C62A035BBA85E24B422E0438
• File SHA-1: 0x9115297B18AD3B0075145D13E923FFB803416E73
• Filesize: 70,688 bytes
• Alias & packer info:
• Mal/Packer [Sophos]
• packed with: Packman [Kaspersky Lab]

• Summary of the findings:

What's been found	Severity Level
Produces outbound traffic.

Technical Details:

File System Modifications

• The following file was created in the system:

#	Filename(s)	File Size	File Hash	Alias
1	[file and pathname of the sample #1]	70,688 bytes	MD5: 0xE9803911C62A035BBA85E24B422E0438 SHA-1: 0x9115297B18AD3B0075145D13E923FFB803416E73	Mal/Packer [Sophos] packed with Packman [Kaspersky Lab]

Memory Modifications

• There was a new process created in the system:

• Note:
• [generic host process filename] is a full path filename of [generic host process].

• The following module was loaded into the address space of other process(es):

Other details

• Analysis of the file resources indicate the following possible country of origin:

	Republic of Korea

• The following Host Names were requested from a host database:
• 192.5.5.241
• 27.125.205.36

• There was registered attempt to establish connection with the remote host. The connection details are:

Outbound traffic (potentially malicious)

• There was an outbound traffic produced on port 11180: