Behavioral task
behavioral1
Sample
NEAS.cd7821b892b4e4327b787e6159fbe9a2_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.cd7821b892b4e4327b787e6159fbe9a2_JC.exe
-
Size
353KB
-
MD5
cd7821b892b4e4327b787e6159fbe9a2
-
SHA1
975c56121fd3eaeb56ece67a3df92362a7493920
-
SHA256
af0cf0df7aded9d4e7544f3feaf611cdf668f7d6a0ebb9b79021c762f7dee452
-
SHA512
8df453273ba2f7688f721582740e89c2b6ad0c3c6d8bbcff99c6dcb9755262297152ef3043a2d512f1a763a2e04d9cb74b7a727a6ea2b702ca2896493e329006
-
SSDEEP
6144:d09g16vl/rOlA2//whEp0Gd1EL0F921aZL1+p9D6UFEMk02lha:v2Ol1//whEp0Gd1E8921Uu6cEt9Pa
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cd7821b892b4e4327b787e6159fbe9a2_JC.exe
Files
-
NEAS.cd7821b892b4e4327b787e6159fbe9a2_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
dssdffff Size: 247KB - Virtual size: 276KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dssdffff Size: 96KB - Virtual size: 100KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ