Behavioral task
behavioral1
Sample
NEAS.4503733f7a8ad118a761a889fab676e0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4503733f7a8ad118a761a889fab676e0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4503733f7a8ad118a761a889fab676e0.exe
-
Size
220KB
-
MD5
4503733f7a8ad118a761a889fab676e0
-
SHA1
66b4a12bf15589c9c00d4e49533334c4054165f5
-
SHA256
50bfa0992f7d6911de3d661cfc0bac4b9dcdd9a3d46122c226ac934f56d39e33
-
SHA512
40a160f62c42b44a3560b3b6a4e8dba7be7b6dcb16a3f2314585d8b37442c423f65d346713cb242be81da788fc867cf800509f7c80f737ce768bc884e9fd1bbf
-
SSDEEP
3072:0B9QKKYmN+oH6YG26vm+6Ryuic+XzoWad5N443nse:0BqL+5YcQuc+cTiqse
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4503733f7a8ad118a761a889fab676e0.exe
Files
-
NEAS.4503733f7a8ad118a761a889fab676e0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GSUDUHUW Size: 128KB - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GSUDUHUW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ