How many AVs actually detected it at Virustotal? Have you submitted the sample per the instructions here?