# Nov 2012 - W32.Narilam Sample

**[contagiodump.blogspot.com/2012/12/nov-2012-w32narilam-sample.html](http://contagiodump.blogspot.com/2012/12/nov-2012-w32narilam-sample.html)**

End of the year presents:

This is a sample of W32.Narilam

Related News and Analysis:

Nov 2012 (malware is much older but re-surfaced in Nov 2012)

[W32.Narilam – Business Database Sabotage](http://www.symantec.com/connect/blogs/w32narilam-business-database-sabotage)

[W32.Narilam | Symantec](http://www.symantec.com/security_response/writeup.jsp?docid=2012-111516-3751-99&om_rssid=sr-latestthreats30days)

**Download**

[Download. (Email me if you need the password scheme - see profile for email)](http://www.mediafire.com/?4irmd7d5ai4dcym)

sample credit anonymous

**Files**

File: data.exe_
Size: 1629184
MD5: 8E63C306E95843ECCAB53DAD31B3A98B

**Automatic scans**


-----

https://www.virustotal.com/file/cf3c015d828784c7dffcba80619dba4cba970680ea5aa9f42f73
56e79643a749/analysis/

SHA256: cf3c015d828784c7dffcba80619dba4cba970680ea5aa9f42f7356e79643a749
SHA1: b7462e83cd81fcbee7b799e230bed19331c9d516
MD5: 8e63c306e95843eccab53dad31b3a98b
File size: 1.6 MB ( 1629184 bytes )
File name: Data.exe
File type: Win32 EXE
Tags: peexe
Detection ratio: 32 / 43
Analysis date: 2012-11-26 12:06:30 UTC ( 1 week, 3 days ago )

Additional information
Behavioural information
Antivirus Result Update
Agnitum Worm.Agent!nmyuAQJx1Sc 20121125
AhnLab-V3 Trojan/Win32.Scar 20121125
AntiVir TR/Crypt.CFI.Gen 20121126
Avast Win32:Rootkit-gen [Rtk] 20121126
AVG unknown virus Win32/DH{LmQDYmcJDw} 20121126
BitDefender Gen:Variant.Zusy.Elzob.9149 20121126
Comodo UnclassifiedMalware 20121126
DrWeb Trojan.Siggen4.39803 20121126
Emsisoft Gen:Variant.Zusy.Elzob.9149 (B) 20121126
ESET-NOD32 Win32/Agent.NEN 20121126
F-Secure Gen:Variant.Zusy.Elzob.9149 20121126
Fortinet W32/Agent.CB!tr 20121126
GData Gen:Variant.Zusy.Elzob.9149 20121126
Ikarus Virus.Win32.Virut 20121126
Jiangmin Trojan/Scar.dtc 20121126
K7AntiVirus Riskware 20121124
Kaspersky Worm.Win32.Narilam.b 20121126
Kingsoft Win32.Troj.Generic_01.k 20121119
McAfee Generic BackDoor.wc 20121126
McAfee-GW-Edition Heuristic.LooksLike.Win32.Suspicious.J!86 20121126
Microsoft Trojan:Win32/Delfsnif.DU 20121126
MicroWorld-eScan - 20121126
Norman W32/Obfuscated.H3!genr 20121126
Panda Trj/Scar.AB 20121125
Rising Worm.Win32.VobfusEx.e 20121126
Sophos Mal/Banker-CB 20121126


-----

SUPERAntiSpyware Trojan.Agent/Gen-Falint 20121126
Symantec W32.Narilam 20121126
TotalDefense Win32/FakeFLDR_i 20121125
TrendMicro Mal_OtorunN 20121126
TrendMicro-HouseCall Mal_OtorunN 20121126
VBA32 Trojan.FakeFolder.1941 20121124
ViRobot Trojan.Win32.A.Scar.1569280


-----