Behavioral task
behavioral1
Sample
120d5235a8b45963797f7449254c1be9_JC.exe
Resource
win7-20230831-en
General
-
Target
120d5235a8b45963797f7449254c1be9_JC.exe
-
Size
216KB
-
MD5
120d5235a8b45963797f7449254c1be9
-
SHA1
374877f2140cf0ff5cf37e73076fdb6ca3f6818e
-
SHA256
7ea22f8ca671bde42d5d97368b42d074dffa2be7f38caaf349fd91e023c8d9a7
-
SHA512
1f0e7a2bf9a99e835899821e253b6b3219e7183f29939c263ac31a987cdc9c89cc92ca53dbbd7e1b9ed6dd8785e2687d9f8930f4c08b7d8cfe6768127236eb0c
-
SSDEEP
3072:tAtvqCDm+W03RB5eUp6UlQ/mUjyfPfGknARyd4Ycex3YvQd2/:2tvqeP33AYFXoiPfGkAoJc8Q/
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 120d5235a8b45963797f7449254c1be9_JC.exe
Files
-
120d5235a8b45963797f7449254c1be9_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
HOUYDBBF Size: 128KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HOUYDBBF Size: 55KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE