Static task
static1
Behavioral task
behavioral1
Sample
Zaoriwusluw.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Zaoriwusluw.exe
Resource
win10v2004-20240412-en
General
-
Target
Zaoriwusluw.exe
-
Size
72KB
-
MD5
2f684c92594e637551ef55ca24f5ca63
-
SHA1
bd15d0703b9603f76280b0fe562f13daced20fb3
-
SHA256
2b6efedd420b10b5a76abc926bc6ec224af328b1dd2413e63805bc23ba7e3e3a
-
SHA512
aeed0af654f3f5543142f6d183b689ec488765e3eeb343046fa4887831790824e58703c6db49bd87c1fcc9f75718d474b444615254b6296682e97dabe8098484
-
SSDEEP
1536:AOjSjjjGHF37CuCYAodc8EKxajWSWpg801dX7ycwygWOJ7G:zF3Wh78Xu/21pLJK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Zaoriwusluw.exe
Files
-
Zaoriwusluw.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ