Behavioral task
behavioral1
Sample
NEAS.87b96cf201b801de19f320414f2e86f0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.87b96cf201b801de19f320414f2e86f0.exe
-
Size
197KB
-
MD5
87b96cf201b801de19f320414f2e86f0
-
SHA1
27a61d07df8b5aa1168bd976d51a209557e1b2e5
-
SHA256
be392d4cd268ed08946bd4a016322059753e98ea12abb79ffad4e1ead77f4b36
-
SHA512
5e859768f0a3075d7d88ac451ccb13e2731cfeb151cdec8e2bc253ee7d26a5558dec6e8723b1152341ff829f80fbb03ed36c525a7cf6d644ae09424a14d79d15
-
SSDEEP
3072:nl6CNlACeMKV6ETiiXd60irnsegFWL5QJReMSJN4atU:nQCNSv6p8lOseQWLyJQ3Ji6U
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.87b96cf201b801de19f320414f2e86f0.exe
Files
-
NEAS.87b96cf201b801de19f320414f2e86f0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GSUDUHUW Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GSUDUHUW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE