Behavioral task
behavioral1
Sample
fe740d517609d67590d959d2a32d68f0_exe32.exe
Resource
win7-20230831-en
General
-
Target
fe740d517609d67590d959d2a32d68f0_exe32.exe
-
Size
224KB
-
MD5
fe740d517609d67590d959d2a32d68f0
-
SHA1
b8510dee210eb125bc9275e9c8395525eb266eb5
-
SHA256
e9e3c89679832affa1cc4f9faca503b86f01f84b6d3dfddf3c86d0b6d4d09bc4
-
SHA512
9c7a1aa9c8f6c92d715c7533867ed40c3c8b8c1687df5f756bb50bd5147325cd7ee6c8111a35483f10ac59b9843bfb59746ca6284e60e8d86a30234097ff7599
-
SSDEEP
1536:Ke9UBh1/NGugULlsnHMogdeCEBsBnAlm8asuPLcL8sWjcdn6UJzqLovpG3iaQREz:/iNZFNCyBAUlQjn6UJz4omjuVZ6rNp
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe740d517609d67590d959d2a32d68f0_exe32.exe
Files
-
fe740d517609d67590d959d2a32d68f0_exe32.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
HHSUHUDH Size: 128KB - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HHSUHUDH Size: 60KB - Virtual size: 64KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ