Written in Delphi, compressed with ASPack

Made in Russia

Server
Dropped File:
C:\WINDOWS\Internat32.exe 

port: 666 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "Internat32"