Maravia (a)
(Backdoor.Win32.Maravia.a)


by ?

Written in Delphi, compressed with ASPack

Probably made in Brazil


size: 205,312 bytes

port: 3100 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "iexplorer"
data: c:\windows\system\iexplorer.exe 

The text string "[email protected]" is visible in the binary.


tested on Windows XP
May02, 2005

MegaSecurity