Behavioral task
behavioral1
Sample
NEAS.10ce1521ddfd04cdf252e480e93d0f10.exe
Resource
win7-20231020-en
General
-
Target
NEAS.10ce1521ddfd04cdf252e480e93d0f10.exe
-
Size
199KB
-
MD5
10ce1521ddfd04cdf252e480e93d0f10
-
SHA1
5bee8423ddfa45b697f0b0cf3e70c189e171503d
-
SHA256
ed812a9e1f9946518546b5b39a77c707ad2ce8391a0689e66aee76bb5aeae027
-
SHA512
30eb9a9573eb80cc14f1ee168c3c878760281f670e9a80d52b799f9bc0cd3cb0c001668951ad7e2c2aae292fa8c03f00402e543e420a46a9250e0a7bd57abb61
-
SSDEEP
3072:mOu4dvYP2VkKRCvSkOqoIXpGTq/tmdUHhULc4Gq:mOuyvYPGkKRaHXpG5do4T
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.10ce1521ddfd04cdf252e480e93d0f10.exe
Files
-
NEAS.10ce1521ddfd04cdf252e480e93d0f10.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYGD Size: 143KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYGD Size: 51KB - Virtual size: 52KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ