Behavioral task
behavioral1
Sample
cf9af0b881bf2a2ce29ae19334bb3110_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
cf9af0b881bf2a2ce29ae19334bb3110_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
cf9af0b881bf2a2ce29ae19334bb3110_exe32.exe
-
Size
200KB
-
MD5
cf9af0b881bf2a2ce29ae19334bb3110
-
SHA1
c3a1449c057dd67e6249fc2b7e8108ba142c7095
-
SHA256
224c59b14c8bea0c79de8ace7ead541fd125c79b63d151c6794fb85d5a1ca4fc
-
SHA512
9cbfb87032fbac897ae23f824ce95c5d2c12bd2681953adc0e25d8154dab2cdf5e44d8027490de4f0ee51e9f9808e792599dc3f49710892dad880d450954483b
-
SSDEEP
3072:2tvedCiN03RB5dOnmp6UlQ/mUjyfPfGknARyd4Ycex:2tvqy36n2FXoiPfGkAoJc8
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf9af0b881bf2a2ce29ae19334bb3110_exe32.exe
Files
-
cf9af0b881bf2a2ce29ae19334bb3110_exe32.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
HOUYDBBF Size: 128KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HOUYDBBF Size: 55KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE