Behavioral task
behavioral1
Sample
NEAS.1729d58ca7e1bbfa82e145ba2ae33840.exe
Resource
win7-20230831-en
General
-
Target
NEAS.1729d58ca7e1bbfa82e145ba2ae33840.exe
-
Size
191KB
-
MD5
1729d58ca7e1bbfa82e145ba2ae33840
-
SHA1
b7ede0c80f8d818c24f1cfac13a85bc5343c9fc2
-
SHA256
bd28957cd5528ae2fd0e52f267d680d2998211688ef0edba0747fa95c52bd691
-
SHA512
2e1041465e64e42b20fcf404c6a8f340a48e4a5e88cdeb11f48df0b7e225c70dcfc4324e00f3634c4861573c6e3ca9bda481ddcf62ebc05ba49458478c5c8e14
-
SSDEEP
3072:mqp2cKm5DI/OQf6B6E8wervMLN78FWY6uGKq0FA11:m8la5aF4jMLh85Ab
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1729d58ca7e1bbfa82e145ba2ae33840.exe
Files
-
NEAS.1729d58ca7e1bbfa82e145ba2ae33840.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
BHSHDGGW Size: 133KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BHSHDGGW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE