[markusg]

http://www.virustotal.com/file-scan/rep ... 1293018476

[EP_X0FF]

Well it is some sort of spy. It is written on Delphi and trying to connect 80.87.207.139.
Also it creates registry key HKU\SOFTWARE\svchcost\registry.

If you rerun this program it will fail to initialize properly and will create new sub key for already created key (e.g. HKEY_CURRENT_USER\SOFTWARE\svchcost\registry\SOFTWARE\svchcost\registry\)

Some sort of total script-kiddie trash.

edit:

changed topic title to be more descriptive