Behavioral task
behavioral1
Sample
ba57ea680ce262b95625d235943f8250_JC.exe
Resource
win7-20230831-en
General
-
Target
ba57ea680ce262b95625d235943f8250_JC.exe
-
Size
231KB
-
MD5
ba57ea680ce262b95625d235943f8250
-
SHA1
f64041698fd0ec478e67cbd9fc911d60e4f5dc0a
-
SHA256
d8d67f8c9bce3d3c267d212dd4713ddbc7a0ee60e3ee8702da8142df8bf10764
-
SHA512
aaf4b21866ed4d93a6b63e56e4818ea6d43ee5d7c64da267813dfc2d92dfaab4bc9a49d93dc433552616ab73f0d4cfdfa177808833363a51d6468ebf6f7bc020
-
SSDEEP
3072:Adrb8W+tGKqLDphy9q65kOVp4lwlq1/9l53GdeItG+XNcX2:A1QW+tGFLVRXOVuwlqpAN4G
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba57ea680ce262b95625d235943f8250_JC.exe
Files
-
ba57ea680ce262b95625d235943f8250_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
bsdishfh Size: 151KB - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bsdishfh Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ