Written in Visual Basic

Server:
dropped file:
C:\WINDOWS\SYSTEM\CAMARO.EXE 

size: 108 KB
        
	  
startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Eadcpzk" 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "Dqjady"