A forum for reverse engineering, OS internals and malware analysis 

Malware/MSIL-BA

Forum for analysis and discussion about malware.

Re: Malware/MSIL-BA

 #4600  by EP_X0FF
 Fri Jan 21, 2011 3:14 am
markusg wrote:WindowTabs.exe
http://www.virustotal.com/file-scan/rep ... 1295550150
Modified version of WindowsTabs application (it has different hash that official 650 version). Does not working. However quick looking does not revealed that it was joined with something so attach removed.

Re: Malware/MSIL-BA

 #4666  by EP_X0FF
 Sun Jan 23, 2011 1:38 pm
markusg wrote:mini-KMS_Activator_v1.053.exe
http://www.virustotal.com/file-scan/rep ... 1295785253
Multi-activator for Microsoft products joined with Backdoor Jewdo.

Actual malware attached, original attach removed.

http://www.virustotal.com/file-scan/rep ... 1295789603
Attachments
pass: malware
(5.54 KiB) Downloaded 40 times
 Return to “Malware”