Behavioral task
behavioral1
Sample
5742a15cbdb7a5040740fdd7876f9380_exe32.exe
Resource
win7-20230831-en
General
-
Target
5742a15cbdb7a5040740fdd7876f9380_exe32.exe
-
Size
181KB
-
MD5
5742a15cbdb7a5040740fdd7876f9380
-
SHA1
f9bb1a1713575de04a507161c438ed14da262595
-
SHA256
756084699f08b043010f0b1e75c2158e345540ae9926e3ab777c7c0684c597eb
-
SHA512
b54d3962f379a94760e552921a87704c1574dd01757672130ff0194e091e7dfccaf4b983d2cc75c353a8312eb284841dd782f8d9c11accdd3e2a1d5e8887a294
-
SSDEEP
3072:1tpCP+/oGvWSldHy64T9pmZ+luXwy2f9LDh+Hp:Tp+IrvNyhO4yfWvMJ
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5742a15cbdb7a5040740fdd7876f9380_exe32.exe
Files
-
5742a15cbdb7a5040740fdd7876f9380_exe32.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
TYSGDGYS Size: 120KB - Virtual size: 140KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TYSGDGYS Size: 55KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ