Behavioral task
behavioral1
Sample
NEAS.40dece64d348f366976bb219c0e5d210.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.40dece64d348f366976bb219c0e5d210.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.40dece64d348f366976bb219c0e5d210.exe
-
Size
816KB
-
MD5
40dece64d348f366976bb219c0e5d210
-
SHA1
bb07bcfa6b493abc6fe89b114a12bdc4fad4b00d
-
SHA256
822e8a84f6a79eac4aae57af6ff19f14a5ecf5b9580824d493b88e1cecbc0aca
-
SHA512
e26fa7521e55159eb07f99a1e206c7dd5e10575c08ec42ecc14eaf3aad92ea5152676509f187ca138ccae8c4fe0e9dcdad7ff2b2e561519400b58bcb31b2614d
-
SSDEEP
12288:vvp1096yfFZbzl+n0tmpPAlDqfJZKay4NglmoWkI094og2GgPZki:vv0/5+0yyD8ZKajNglAkI094YL
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.40dece64d348f366976bb219c0e5d210.exe
Files
-
NEAS.40dece64d348f366976bb219c0e5d210.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
IOKGDTTY Size: - Virtual size: 484KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IOKGDTTY Size: 326KB - Virtual size: 328KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE