Behavioral task
behavioral1
Sample
NEAS.9a3418bd66e17c9fd587f6f583556750.exe
Resource
win7-20230831-en
General
-
Target
NEAS.9a3418bd66e17c9fd587f6f583556750.exe
-
Size
205KB
-
MD5
9a3418bd66e17c9fd587f6f583556750
-
SHA1
de98e06831c4e97ed4f09c619e432c630d48b9cf
-
SHA256
64aff231e4d205988dda5266151efed9ba8b36e03a48fc8695b70b482817b281
-
SHA512
0dcee24dada2b8d8b4e969047dee3502c4513934ca912511e142218ab85859b2a0b319f9b707e2eae7b1f7c76236f333b240de3b41b105f9fac493b83e7ab97a
-
SSDEEP
3072:fXKKeWcNEzT5zvfpmGYoUyDpwPHHaFeo66bsDl8NLa:fXKK/cNcT5wDyDpCH6FL66bsDlya
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9a3418bd66e17c9fd587f6f583556750.exe
Files
-
NEAS.9a3418bd66e17c9fd587f6f583556750.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
hudshufe Size: 147KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hudshufe Size: 47KB - Virtual size: 48KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE