Behavioral task
behavioral1
Sample
d8d98e0c6b6ed50b5e9ca214c6a68b00_exe32.exe
Resource
win7-20230831-en
General
-
Target
d8d98e0c6b6ed50b5e9ca214c6a68b00_exe32.exe
-
Size
234KB
-
MD5
d8d98e0c6b6ed50b5e9ca214c6a68b00
-
SHA1
0b486e2f2c0cd7c51c3211031ffa34a019d77bfc
-
SHA256
03ed168dc7ee449c171377652ea8b0f7e0e5e763ecb0a8e447564d3d451f3a9d
-
SHA512
c7f1de034e5c28c3e0ea2cf8acfc7b1cbddafceb82fa2ee0864c42056d7d99fd6b473d7016748f489ba46e940046f2556e1a3c0621df070550fced1b4a0ece66
-
SSDEEP
3072:eushWbz+6LPr5Qy7K65U8pw7VpMrEnh3Bhh3v9tIH:euQWbS6LPeH8pw7jfFv9tIH
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8d98e0c6b6ed50b5e9ca214c6a68b00_exe32.exe
Files
-
d8d98e0c6b6ed50b5e9ca214c6a68b00_exe32.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
xvgdgrgr Size: 151KB - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xvgdgrgr Size: 79KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ