A forum for reverse engineering, OS internals and malware analysis 

Forum for analysis and discussion about malware.
 #4529  by EP_X0FF
 Tue Jan 18, 2011 6:54 am
markusg wrote:n.exe
http://www.virustotal.com/file-scan/rep ... 1295291457
This is Worm.Win32.Bybz with backdoor capabilities, crypted by VB crap.

Unpacked sample attached

http://www.virustotal.com/file-scan/rep ... 1295333446
http://www.virustotal.com/file-scan/rep ... 1295333644

STUB.dll is payload dll to be injected into IEXPLORE.exe

thread moved
Attachments
pass: malware
(53.53 KiB) Downloaded 56 times
 #5421  by EP_X0FF
 Fri Mar 11, 2011 11:27 am
markusg wrote:keygen.exe
http://www.virustotal.com/file-scan/rep ... 1299770871
Keygen for Dragon Age joined with Win32.Bybz (see attach for malware and unpacked)

Original attach removed.
Posts moved
Attachments
pass: malware
(241.5 KiB) Downloaded 47 times