Malware Domain List

Malware Related => Malware Analysis => Topic started by: MysteryFCM on August 09, 2008, 09:59:51 pm

Title: IMAdvertiser
Post by: MysteryFCM on August 09, 2008, 09:59:51 pm
Snagged this from pay-per-install.org ..... zip contains original archive (was named as .zip, but had to rename to .rar to actually extract the contents).

Only the source code was included, not the actual compiled file. I've not got a compiler on my lappy ....
Title: Re: IMAdvertiser
Post by: sowhat-x on August 10, 2008, 12:03:43 am
Here is,I've used Visual Studio 6 and Windows Server PSDK from Feb 2003...
(latest sdk version that officially supports VS 6...)
Title: Re: IMAdvertiser
Post by: sowhat-x on August 10, 2008, 12:07:26 am
Heh,thought I'd check if AVs already detect it,say by heuristics or so... 5/36 (13.89%)
http://www.virustotal.com/analisis/6f29066a2ecad52f6361818a7dd55673
Title: Re: IMAdvertiser
Post by: MysteryFCM on August 10, 2008, 12:13:03 am
Nice one cheers :)

Mind if I post the exe to MR? (inc a link here of course)
Title: Re: IMAdvertiser
Post by: sowhat-x on August 10, 2008, 12:18:23 am
Heh,post it everywhere you think it's needed obviously...already sent to VT,Jotti and UM.
Just note that I did this really quickly...i've even f*cked up with the resource icon,lmao,
had to add a linker flag as well to avoid couple warnings...  :)
Title: Re: IMAdvertiser
Post by: MysteryFCM on August 10, 2008, 12:21:20 am
no worries, cheers :)