Troj/Agent-ZLU exhibits the following characteristics:
File Information
- Size
- 240K
- SHA-1
- 51d628f25c1a32150d7342eb23f1e25b055c973f
- MD5
- ff431e5fcef931fe35fdcd78c2cbfc14
- CRC-32
- 41dd30ab
- File type
- application/x-ms-dos-executable
- First seen
- 2012-12-29
Runtime Analysis
Registry Keys Created
- HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
- NoAutoUpdate
- 0x00000001
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run
- cuojue
- c:\Documents and Settings\test user\cuojue.exe /g
Registry Keys Modified
- HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
- ShowSuperHidden
- 0x00000000
DNS Requests