Behavioral task
behavioral1
Sample
NEAS.a2738f247c638012b055008dd1a4b7fbexe_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.a2738f247c638012b055008dd1a4b7fbexe_JC.exe
-
Size
199KB
-
MD5
a2738f247c638012b055008dd1a4b7fb
-
SHA1
897b1c417954f554d8dfcc126049b17762d075bf
-
SHA256
f711dfc81ccf2526a86014bf9ef1426a8f4d545371d7877cda9fde92b3b2c708
-
SHA512
17b036e2685c49df4c6428a2fd445d8bf47054917b9e829d68ea9c012d3fba5c95257a53ec5a7e401a8ea2e9ed3a3063e3a6bc999aef71bbe386696e7ccd67d3
-
SSDEEP
3072:llfTVlvfdEDRmyc+XA60Kj4omjuVZ6rNp0zc:lpTV9rZllomjuCNp0zc
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a2738f247c638012b055008dd1a4b7fbexe_JC.exe
Files
-
NEAS.a2738f247c638012b055008dd1a4b7fbexe_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
HHSUHUDH Size: 128KB - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HHSUHUDH Size: 60KB - Virtual size: 64KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ