Hello,

Thank you for submitting your sample for analysis by GFI SandBox.

Attached are the XML and PDF reports generated by GFI SandBox for analysis 8712. The PDF report contains an executive-level summary, including network activity and screenshots. The XML report contains all behavioral information gathered during analysis.

SandBox results for Sandbox.exe
Analysis ID:	8712
Date Analyzed:	2012-03-26 17:46:31
Sandbox Attributes:	IE 9, Office 2003, Adobe Reader 9.4, Flash 10.1, Java 6
MD5 Hash:	691f1e6ad721b26662db01f34c2036f1
Filename:	Sandbox.exe
File Type:	PE32 executable for MS Windows (GUI) Intel 80386 3
Digital Behavior Traits
Injected Code	NO
More than 5 Processes	NO
Copies to Windows	NO
Windows/Run Registry Key Set	NO
Makes Network Connection	NO
Creates EXE in System	NO
Starts EXE in System	NO
Starts EXE in Documents	NO
Deletes File in System	NO
Hooks Keyboard	YES
Creates Hidden File	YES
Creates DLL in System	NO
Creates Mutex	YES
Alters Windows Firewall	NO
Checks For Debugger	NO
Could Not Load	NO
Opens Physical Memory	NO
Modifies Local DNS	NO
Starts EXE in Recycle	NO
Creates Service	YES
Modifies File in System	YES
Deletes Original Sample	NO
VirusTotal Results
Last Scanned:	2012-03-26 21:31:09
nProtect	Not Detected
CAT-QuickHeal	Not Detected
McAfee	Not Detected
TheHacker	Not Detected
K7AntiVirus	Not Detected
VirusBuster	Not Detected
NOD32	Not Detected
F-Prot	Not Detected
Symantec	Not Detected
Norman	Not Detected
ByteHero	Not Detected
TrendMicro-HouseCall	Not Detected
Avast	Not Detected
eSafe	Not Detected
ClamAV	Not Detected
Kaspersky	Not Detected
BitDefender	Not Detected
ViRobot	Not Detected
Emsisoft	Not Detected
Comodo	Not Detected
F-Secure	Not Detected
DrWeb	Not Detected
VIPRE	Not Detected
AntiVir	Not Detected
TrendMicro	Not Detected
McAfee-GW-Edition	Not Detected
Sophos	Not Detected
eTrust-Vet	Not Detected
Jiangmin	Constructor.IDL.j
Antiy-AVL	Not Detected
Microsoft	Not Detected
SUPERAntiSpyware	Not Detected
GData	Not Detected
Commtouch	Not Detected
AhnLab-V3	Not Detected
VBA32	Not Detected
PCTools	Not Detected
Rising	Not Detected
Ikarus	Not Detected
Fortinet	Not Detected
AVG	Not Detected
Panda	Not Detected
GFI SandBox is an automated malware analysis tool which allows the analysis of virtually any Windows application or file. For more information, visit:http://www.gfi.com/malware-analysis-tool.

The GFI Advanced Technology Group (ATG) provides specialized threat analysis and defense tools to web portals, telecoms and government defense agencies around the world. Email us at: atg@gfi.com, to see how you can leverage GFI SandBox and other ATG solutions within your organization.

Thank you,

GFI ATG
atg@gfi.com

© 2011 GFI Software All Rights Reserved.