Submission Summary:

• Submission details:
• Submission received: 11 August 2012, 08:00:27
• Processing time: 13 min 45 sec
• Submitted sample:
• File MD5: 0x837D46A25E0F8E9B97AE73D13A2C0FBC
• File SHA-1: 0xB9E1DFA5F948DA8C40371CF08B609F0B5B427A16
• Filesize: 3,496,960 bytes

• Summary of the findings:

What's been found	Severity Level
Creates a startup registry entry.

Technical Details:

File System Modifications

• The following file was created in the system:

• The following directory was created:
• %UserProfile%\inf

• Note:
• %UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP).

Memory Modifications

• There was a new process created in the system:

Registry Modifications

• The following Registry Keys were created:
• HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer
• HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\TabbedBrowsing
• HKEY_LOCAL_MACHINE\SOFTWARE\Description
• HKEY_LOCAL_MACHINE\SOFTWARE\Description\Microsoft
• HKEY_LOCAL_MACHINE\SOFTWARE\Description\Microsoft\Rpc
• HKEY_LOCAL_MACHINE\SOFTWARE\Description\Microsoft\Rpc\UuidTemporaryData

• The newly created Registry Values are:
• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
• SunJavaMdb = "[file and pathname of the sample #1]"

so that [file and pathname of the sample #1] runs every time Windows starts

• [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\TabbedBrowsing]
• Enabled = 0x00000000
• [HKEY_LOCAL_MACHINE\SOFTWARE\Description\Microsoft\Rpc\UuidTemporaryData]
• NetworkAddress = A6 25 B0 1B 0C 50
• NetworkAddressLocal = 0x00000001

Other details

• Analysis of the file resources indicate the following possible country of origin:

	Brazil

• To mark the presence in the system, the following Mutex object was created:
• ?????