Static task
static1
Behavioral task
behavioral1
Sample
Device/HarddiskVolume3/Program Files (x86)/SAAZODBKP/SaazUpdates/zLogDsk.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Device/HarddiskVolume3/Program Files (x86)/SAAZODBKP/SaazUpdates/zLogDsk.exe
Resource
win10v2004-20231020-en
General
-
Target
WS2303_2023-11-02_22_51_21.292.zip
-
Size
43KB
-
MD5
b5e39769551e4c5691ca1d9c568c6638
-
SHA1
606b1b05ed3ba39925ca8ed781a0f04255e421e3
-
SHA256
a73ffcd66852d7bcdf97a9c1563109e93f96715416fea5ac32ed04baf2e9805a
-
SHA512
1c6c50b99767a15ce9c8a9a5f3ee0b5bf0693afd04669b7afe6ab15432ea48210932b6c978d7743b57a30a7c857754732487a18df77c2b4c145c6b425c16df84
-
SSDEEP
768:NRds43+sdhrU59bTpsyLQarOo6amem+020JrHHTs1SaDiLFnJsGY:NUAI9bTpsbu8es3JrALD+FnJ1Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Device/HarddiskVolume3/Program Files (x86)/SAAZODBKP/SaazUpdates/zLogDsk.exe
Files
-
WS2303_2023-11-02_22_51_21.292.zip.zip
Password: XeNoN!#13!#
-
Device/HarddiskVolume3/Program Files (x86)/SAAZODBKP/SaazUpdates/zLogDsk.exe.exe windows:4 windows x86
Password: XeNoN!#13!#
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
manifest.json