Posted by: Dan O'Connor
I did a dump of the exe, and the good news is that I don’t see any sign of a packer. The bad news is that I don’t see any sign of it’s ability to phone home. I was really hoping that this would be easy and a dns name or ip would be found in the exe.
Next thing is to run through it in a debugger and see if there is anything else of note.