Behavioral task
behavioral1
Sample
NEAS.NEASe0afc8c68348bb4437f76fd65224a9ffexe_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.NEASe0afc8c68348bb4437f76fd65224a9ffexe_JC.exe
-
Size
197KB
-
MD5
e0afc8c68348bb4437f76fd65224a9ff
-
SHA1
b532486f6e6044ebce46a67769c0cba5d767f1bc
-
SHA256
9fdd8257e221b382c325d1458cd560eb8cdbdce8f8b99ab83223b0a3bc850dbf
-
SHA512
8d25cf60c9ead5fddcf05f88c1162ea379225a0782ccb361fcba38eff0eb47382c94f21bd8effe1b3ea5ff7ab805abff0176da5a1a2265da2e3aac4a9e9f0787
-
SSDEEP
3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhgL4SY:gExhk7rh7NEOIYWlPM6r6WY
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.NEASe0afc8c68348bb4437f76fd65224a9ffexe_JC.exe
Files
-
NEAS.NEASe0afc8c68348bb4437f76fd65224a9ffexe_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYSGDTTE Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYSGDTTE Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE