[SpamCop-List] Re: CIA Spoof - Winhexed
Ant
not at home.today
Thu Dec 8 01:41:24 EST 2005
"Porpoise" wrote:
> Have managed to Winhex the file but there is nothing that jumps out at me
> (that I can decypher). Basically just another variant of the
> Trojan-Proxy.Win32.Agent.hx as far as I can see - without being anything
> strange or unusual....... !??!
The exe is packed with UPX 1.93 (not 1.92 as I stated earlier). Did
you run UPX on it? More strings become visible, but nothing special.
More information about the SpamCop-List
mailing list