Behavioral task
behavioral1
Sample
NEAS.839e516a5746993f156bbb99ba3ce9d0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.839e516a5746993f156bbb99ba3ce9d0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.839e516a5746993f156bbb99ba3ce9d0.exe
-
Size
460KB
-
MD5
839e516a5746993f156bbb99ba3ce9d0
-
SHA1
b56ef65f087a2bef8484198645e1775e7a39d892
-
SHA256
473aad61b810918580131ea21046f8daa63c77072548814b60013c7577a3d567
-
SHA512
8b35f2afe3bb7a46e1c57335ca04335d34fa28dcf1a639215969fa0c7be566632f267c9d536d6a8f1fcf9a9c846d2d55483b496feffad29a5e40c12bab57e505
-
SSDEEP
6144:18efQ6QPJGcLbjg0LFK4UnUHOkb8734A2P6gt99Wvtxrpp29xcE:46QPJGcE05KRg04zPZt9mtPO
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.839e516a5746993f156bbb99ba3ce9d0.exe
Files
-
NEAS.839e516a5746993f156bbb99ba3ce9d0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 239KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE