Behavioral task
behavioral1
Sample
NEAS.608bb5e31451e31fda02453186bae6b0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.608bb5e31451e31fda02453186bae6b0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.608bb5e31451e31fda02453186bae6b0.exe
-
Size
208KB
-
MD5
608bb5e31451e31fda02453186bae6b0
-
SHA1
e54f4ca550a47cc954e39827c86a7774d54e5c1e
-
SHA256
451f8c1e4303707100c9b54d9bddd10b316f8923340f8785323ef1884858cd48
-
SHA512
9ec96f91505bb621ef2e5a1f35858af5abc17cc4c6502cffc7081bc3d77ba3a9319fdc5885a89de10c67a6eb47e85f4247b9010095bbd8ef220b6e434a3e7bf6
-
SSDEEP
3072:Ydx9fKSGgf73rya6XKervMLN78FWY6uGKq0F:OjrpiJjMLh85
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.608bb5e31451e31fda02453186bae6b0.exe
Files
-
NEAS.608bb5e31451e31fda02453186bae6b0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
BHSHDGGW Size: 133KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BHSHDGGW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE