Behavioral task
behavioral1
Sample
9de8f3f622f6dfdd0183fb5bec21aee0_exe32.exe
Resource
win7-20230831-en
General
-
Target
9de8f3f622f6dfdd0183fb5bec21aee0_exe32.exe
-
Size
232KB
-
MD5
9de8f3f622f6dfdd0183fb5bec21aee0
-
SHA1
38a118bb07df9b082a7a55f22a7eb3f6b35825cf
-
SHA256
a69ab9a3ee73510cb3f2b8805aa239d2f48d3099c443d29aaac16cf167d0fd6a
-
SHA512
68da41195c539745e8afa088dc46ca43fa9c594e16618d04edea537bb2f858111b4dbca8321ea189e8cdd3c3eb71897b0163ec366c38ee58ec882195d19eb034
-
SSDEEP
3072:UIshWbz+6LPr5Qy7K65UGplLnFYZx7CeCEwrED:UIQWbS6LPeHGplLQhDCEwrED
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9de8f3f622f6dfdd0183fb5bec21aee0_exe32.exe
Files
-
9de8f3f622f6dfdd0183fb5bec21aee0_exe32.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
VDHDOJDO Size: 151KB - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VDHDOJDO Size: 76KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ