Behavioral task
behavioral1
Sample
74f799dc54f43dff6eb8c2b61bd1ffaf_JC.exe
Resource
win7-20230831-en
General
-
Target
74f799dc54f43dff6eb8c2b61bd1ffaf_JC.exe
-
Size
232KB
-
MD5
74f799dc54f43dff6eb8c2b61bd1ffaf
-
SHA1
d5f569f62933c5e90f95cd6dac3ac838ff2c0496
-
SHA256
52007875e7fd5c5c77e1a2da69d9a07392da22b0253afc700be4d52aeeceaf81
-
SHA512
75b74021f64819c0510fca62cb677302e5d960214cb9f5e694d787a672e21f9bddc1c10b0bd021e0b11bea42deb6a4a797bb5e9afb9f4e7e8d9873e182567400
-
SSDEEP
3072:UIshWbz+6LPr5Qy7K65UGplLnFYZx7CeCEwrERZ:UIQWbS6LPeHGplLQhDCEwrERZ
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74f799dc54f43dff6eb8c2b61bd1ffaf_JC.exe
Files
-
74f799dc54f43dff6eb8c2b61bd1ffaf_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
VDHDOJDO Size: 151KB - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VDHDOJDO Size: 76KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ