Real name unknown

Written in Delphi

more in this category

Image shown by Backdoor.Win32.Delf.db

dropped file:
c:\WINDOWS\winallap.exe

size: 789.504 bytes

port: 13401, 6677 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Winallap"
data: C:\WINDOWS\winallap.exe