Written in Delphi, compressed with ASPack

more in this category

Backdoor.Win32.Delf.ha:
size: 439.296 bytes

dropped file:
c:\WINDOWS\system32\service.exe
size: 439.296 bytes

port: 2351 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "service"
data: C:\WINDOWS\System32\service.exe 

tested on Windows XP
November 19, 2004