Troj/Agent-ZSS exhibits the following characteristics:
File Information
- Size
- 108K
- SHA-1
- 44c3992a135e825458c0e828676d639241d04b65
- MD5
- 0c623f9747cab21920eeef87dd4e20fd
- CRC-32
- 0e8eb6d4
- File type
- Windows executable
- First seen
- 2013-01-18
Runtime Analysis
Copies Itself To
- c:\Documents and Settings\test user\Application Data\skype.dat
Registry Keys Modified
- HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
- Shell
- explorer.exe,c:\Documents and Settings\test user\Application Data\skype.dat
Processes Created
- c:\windows\system32\svchost.exe