Troj/Yakes-S exhibits the following characteristics:
File Information
- Size
- 85K
- SHA-1
- 7b2bc24fa098c1c73bb4abaae6b3994aaf19374a
- MD5
- bac0ec8afb09a913d4010f753d8b9bd6
- CRC-32
- 2c900d42
- File type
- application/x-ms-dos-executable
- First seen
- 2013-02-24
Runtime Analysis
Copies Itself To
- c:\Documents and Settings\test user\Application Data\skype.dat
Registry Keys Modified
- HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
- Shell
- explorer.exe,c:\Documents and Settings\test user\Application Data\skype.dat
Processes Created
- c:\windows\system32\svchost.exe