Behavioral task
behavioral1
Sample
46dd7a6a9f66fc211f69f7648cb4e860_exe32.exe
Resource
win7-20230831-en
General
-
Target
46dd7a6a9f66fc211f69f7648cb4e860_exe32.exe
-
Size
355KB
-
MD5
46dd7a6a9f66fc211f69f7648cb4e860
-
SHA1
e09b8c16ea80e2d726651b36dad364fe80870720
-
SHA256
57160df9e423f3633bb4cf556aeb7c8a6fb1409b67fdf8e2633ea64ad93b941a
-
SHA512
d8c017dcceab22edc11b170e1f750c1c3e106dc9f10ebff52395c33d41c726c2c5b89d532aaebc9f84137e7439adc6e0dfa3f39bd30c7958246a2291879e23c8
-
SSDEEP
6144:q09g16vl/rOlA2//whEp0Gd1EL0F921aZL1+p9XD6UFEMk02lIM:A2Ol1//whEp0Gd1E8921UCz6cEt9B
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46dd7a6a9f66fc211f69f7648cb4e860_exe32.exe
Files
-
46dd7a6a9f66fc211f69f7648cb4e860_exe32.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
dssdffff Size: 256KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dssdffff Size: 96KB - Virtual size: 100KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE