Behavioral task
behavioral1
Sample
NEAS.fda3face6989368d6f2ba1c9321da420_JC.exe
Resource
win7-20231023-en
General
-
Target
NEAS.fda3face6989368d6f2ba1c9321da420_JC.exe
-
Size
213KB
-
MD5
fda3face6989368d6f2ba1c9321da420
-
SHA1
d2e3506026a1ccb884cdb48ca320c6878eb8eee3
-
SHA256
1bc5be600be6895ae335879c409600276304db4956dcac9c732ed156a1a129a7
-
SHA512
b02ddb3acb0638ac0efe15f1933849c27c102bf7515d516e4c71f8a5a8213bfad43280355c015a869f7d3cdbfc9e1cb79edf94fef34855cee461840108b305f1
-
SSDEEP
3072:dhLsWAzuTLkSJ5Pyv865UuESVpYPx3S2K3ks3ff3p40J:dhwWAiTLf1HuESsb8vPp40J
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fda3face6989368d6f2ba1c9321da420_JC.exe
Files
-
NEAS.fda3face6989368d6f2ba1c9321da420_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
VGSDHSJK Size: 155KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VGSDHSJK Size: 55KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE