Troj/Agent-YWK exhibits the following characteristics:
File Information
- Size
- 296K
- SHA-1
- 8e0ec44dcc8d12fd60031aba427de75d634f9fdd
- MD5
- f85d383be613f254e69384b5130aa760
- CRC-32
- 007445c3
- File type
- Windows executable
- First seen
- 2012-11-17
Runtime Analysis
Dropped Files
- c:\Documents and Settings\test user\Local Settings\Temp\001.jpg
- Size
- 3.6K
- SHA-1
- 028ababdd6000d8fddadc88125543e372f35b43c
- MD5
- 97742211a2b5b56596bc45e1e9f9887d
- CRC-32
- fa56aa98
- File type
- JPEG Interchange Format
- First seen
- 2012-11-17
Registry Keys Created
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- donx
- C:\Documents and Settings\All Users\Common Files\donx.exe
Processes Created
- c:\windows\system32\cmd.exe
- c:\windows\system32\rundll32.exe