Static task
static1
Behavioral task
behavioral1
Sample
Zorara.exe
Resource
win10v2004-20240709-en
General
-
Target
Zorara.exe
-
Size
2.9MB
-
MD5
21a795c0b244d424bbe02e29aea5f7cc
-
SHA1
1fd243f148561f7d87590804b47315edf8ce408d
-
SHA256
9cbf62e8c917c3364d145804650e07b4a5ba857d93bac6d12e8360774e25f6ff
-
SHA512
7a563e3f41dd2c45f482ef597bfbaa269c0457e2c7950f90dff8767e87d6a887ecb4bd84fa0fcb46bfb1509a928353ca34d29ac9a2a6211f0e922adbb1fd5bed
-
SSDEEP
49152:UTrGaBL71r5vD7KaN3yGNjXG0t+uOUiGOlNn+PbejdUhm+:Er7BX55vD7KE3fNjXG0/FiGOlNWblY+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Zorara.exe
Files
-
Zorara.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hrirxomu Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lsbntspz Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE