Troj/MSIL-AK exhibits the following characteristics:
File Information
- Size
- 235K
- SHA-1
- 6542fd1af41c0185a190ddca69698a6f7f278856
- MD5
- d64b9635484a55d3fafee48eded698a3
- CRC-32
- e34bdde9
- File type
- Windows executable
- First seen
- 2012-11-18
Other vendor detection
- Avira
- TR/Dropper.Gen
- Kaspersky
- HEUR:Trojan.Win32.Generic
Runtime Analysis
Copies Itself To
- c:\Documents and Settings\test user\Application Data\svchost.exe
Dropped Files
- c:\Documents and Settings\test user\Local Settings\Temp\PC - 18-11-2012-08.53.01.gif
- Size
- 32K
- SHA-1
- 7efb7558f28307e672333a3a0f2e5c2e5f7995dd
- MD5
- 61ab2d5640ed8ab597dce7939f427942
- CRC-32
- faaeefff
- File type
- Graphic interchange format
- First seen
- 2012-11-18
- c:\Documents and Settings\test user\Local Settings\Temp\148a8f27-dafe-48c8-a423-0a09ff41c216\CliSecureRT.dll
- Size
- 115K
- SHA-1
- cf1a51e6630dbc7e01f14c5b8d9a32577ed277e3
- MD5
- f0c046e12a7b74f16ed7dbb1c9223880
- CRC-32
- ace348d6
- File type
- Windows executable
- First seen
- 2012-05-08
Registry Keys Created
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run
- (Default)
- c:\Documents and Settings\test user\Application Data\svchost.exe
Processes Created
- c:\Documents and Settings\test user\application data\svchost.exe
DNS Requests