Behavioral task
behavioral1
Sample
NEAS.351e772fa3c5c0d2b7bded8ab741cec0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.351e772fa3c5c0d2b7bded8ab741cec0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.351e772fa3c5c0d2b7bded8ab741cec0.exe
-
Size
196KB
-
MD5
351e772fa3c5c0d2b7bded8ab741cec0
-
SHA1
23cc0b2b987f871915fac0bb7380c12d006d6f18
-
SHA256
cd4e80bb99e5d76011a8d16687b41e4eea12fbe529db464ff9c8576c2af8cad0
-
SHA512
caba89f97ed438ccc6bc8d04963b184c79e6e06fdee7d30991e01c0c83fafa3f6553a592c18d2a7142581dc2d0fc4c07fae4f0b5a39481cbe89380e50834c95d
-
SSDEEP
1536:NWXw76uLqwtGK2/InFLhybWi9JQPonlkMVJEU2QnNI0UXbozGqKEAUg:NAw2uLkZHmoSMTvG0UbozvKEAUg
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.351e772fa3c5c0d2b7bded8ab741cec0.exe
Files
-
NEAS.351e772fa3c5c0d2b7bded8ab741cec0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 151KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE