Behavioral task
behavioral1
Sample
NEAS.0584ae2b72ba2ffc73b1dbc3d9b9d930_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0584ae2b72ba2ffc73b1dbc3d9b9d930_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0584ae2b72ba2ffc73b1dbc3d9b9d930_JC.exe
-
Size
404KB
-
MD5
0584ae2b72ba2ffc73b1dbc3d9b9d930
-
SHA1
956819e0116a9bc3a391172bf3a8590f389f0ca1
-
SHA256
3cff76baf10d4b6785adc1546cff961831df65a184be02c0b15c30537b9d97ab
-
SHA512
4ae81b30f678900066628358dd317df1085d7597e5d9052d5013379334f6a450180110ce9a643c2472677dd0461207bd351c45b502f9f3afcd4970a4a6989965
-
SSDEEP
6144:+QfNrlDnRX9HLiDVWrpn/URBudL7qRBpkvfsModogZ/SvnDTH9Q:7V5DnRX9HkUe8L7qRbQUugennH
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0584ae2b72ba2ffc73b1dbc3d9b9d930_JC.exe
Files
-
NEAS.0584ae2b72ba2ffc73b1dbc3d9b9d930_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 364KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE