[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Re: CIA Spoof - Winhexed

Ant not at home.today
Thu Dec 8 01:41:24 EST 2005


"Porpoise" wrote:

> Have managed to Winhex the file but there is nothing that jumps out at me
> (that I can decypher). Basically just another variant of the
> Trojan-Proxy.Win32.Agent.hx as far as I can see - without being anything
> strange or unusual....... !??!

The exe is packed with UPX 1.93 (not 1.92 as I stated earlier). Did
you run UPX on it? More strings become visible, but nothing special.




More information about the SpamCop-List mailing list