灰鸽子

Ceker

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.4.4.1	2008.04.04	-
AntiVir	7.6.0.81	2008.04.04	BDS/Hupigon.Gen
Authentium	4.93.8	2008.04.05	-
Avast	4.7.1098.0	2008.04.04	Win32:PePatch-BL
AVG	7.5.0.516	2008.04.05	-
BitDefender	7.2	2008.04.05	Backdoor.Graybird.CD
CAT-QuickHeal	9.50	2008.04.05	-
ClamAV	0.92.1	2008.04.05	Trojan.Hupigon-1346
DrWeb	4.44.0.09170	2008.04.05	Trojan.Iauh
eSafe	7.0.15.0	2008.04.01	-
eTrust-Vet	31.3.5672	2008.04.04	-
Ewido	4.0	2008.04.05	Backdoor.GrayBird.cd
F-Prot	4.4.2.54	2008.04.05	-
F-Secure	6.70.13260.0	2008.04.05	Backdoor.Win32.GrayBird.cd
FileAdvisor	1	2008.04.05	-
Fortinet	3.14.0.0	2008.04.05	-
Ikarus	T3.1.1.20	2008.04.05	Backdoor.Win32.GrayBird.X
Kaspersky	7.0.0.125	2008.04.05	Backdoor.Win32.GrayBird.cd
McAfee	5267	2008.04.04	Generic.dg
Microsoft	1.3408	2008.04.05	-
NOD32v2	3004	2008.04.05	Win32/GreyBird.LI
Norman	5.80.02	2008.04.04	-
Panda	9.0.0.4	2008.04.04	-
Prevx1	V2	2008.04.05	-
Rising	20.38.60.00	2008.04.03	Backdoor.Gpigeon.2005.avy
Sophos	4.28.0	2008.04.05	Troj/GrayBir-AJ
Sunbelt	3.0.1032.0	2008.04.05	-
Symantec	10	2008.04.05	-
TheHacker	6.2.92.265	2008.04.04	-
VBA32	3.12.6.3	2008.03.25	suspected of Embedded.Backdoor.Win32.GrayBird.aj
VirusBuster	4.3.26:9	2008.04.04	-
Webwasher-Gateway	6.6.2	2008.04.04	Trojan.Backdoor.Hupigon.Gen

                       

Additional information

File size: 1701376 bytes

MD5...: ee18960f6ff3070931863b9f61114778

SHA1..: 85d42411c36fd53c9b72704161eccac2425205b7

SHA256: ed18febbc91fd04591f620a901d6b1166a32e4c9155c30e9feacc15c8ae2b522

SHA512: bc85a09618d29c8174e1a104cbe64d09fda5eb1a17d50b59efa60887af9abeb1 58c382870459dbf35118a234e7a23ae88eda227d10692f069a63b2c01da8e12c

PEiD..: ASPack v2.12 -> Alexey Solodovnikov

PEInfo: PE Structure information ( base data ) entrypointaddress.: 0xa8c001 timedatestamp.....: 0x0 (Thu Jan 01 00:00:00 1970) machinetype.......: 0x14c (I386) ( 11 sections ) name        viradd    virsiz   rawdsiz  ntrpy  md5 .MiB        0x1000  0x1c6000   0x9ce00   8.00  3a4e47ff20f72a140d72ed56d5982fc2 .MiB      0x1c7000    0x7000    0x2800   7.91  88aed1aa8f73da9263fbf6c566a66afb .MiB      0x1ce000    0x6000       0x0   0.00  d41d8cd98f00b204e9800998ecf8427e .MiB      0x1d4000    0x5000    0x1400   7.87  9140726e04e6e713662eec81d2007373 .MiB      0x1d9000   0x1c000     0x200   0.62  bcfb9b496da3cd39f907e52269e455cf ._rc_     0x1f5000  0x228000       0x0   0.00  d41d8cd98f00b204e9800998ecf8427e .MiB      0x41d000    0x7000    0x6200   7.96  0d214434e26032ce7ba1f064f612d92e .mackt    0x424000    0x3000    0x1400   7.82  bbb414f42c246f4b5ffb06528d4f4a2d .rsrc     0x427000  0x265000   0xf4e00   7.99  16fac1ab8155d6123e216833e456c0df .aspack   0x68c000    0x3000    0x2200   5.37  62639ebfd21ef680802611a0d64b1743 .adata    0x68f000    0x1000       0x0   0.00  d41d8cd98f00b204e9800998ecf8427e ( 21 imports )   > kernel32.dll: GetProcAddress, GetModuleHandleA, LoadLibraryA > user32.dll: GetKeyboardType > advapi32.dll: RegQueryValueExA > oleaut32.dll: SysFreeString > advapi32.dll: RegSetValueExA > version.dll: VerQueryValueA > gdi32.dll: UnrealizeObject > user32.dll: CreateWindowExA > oleaut32.dll: SafeArrayPtrOfIndex > ole32.dll: CreateStreamOnHGlobal > oleaut32.dll: GetErrorInfo > comctl32.dll: ImageList_SetIconSize > winspool.drv: OpenPrinterA > shell32.dll: Shell_NotifyIcon > shell32.dll: SHGetSpecialFolderLocation > comdlg32.dll: GetSaveFileNameA > wsock32.dll: WSACleanup > winmm.dll: waveOutWrite > ws2_32.dll: WSAIoctl > imagehlp.dll: CheckSumMappedFile > msacm32.dll: acmStreamUnprepareHeader ( 0 exports )

packers: ASPack

packers: Aspack

packers: ASPack

qigang

没有见样本？？