Behavioral task
behavioral1
Sample
NEAS.514c8ba4c4dd9814191a79fb24601fa9.exe
Resource
win7-20231020-en
General
-
Target
NEAS.514c8ba4c4dd9814191a79fb24601fa9.exe
-
Size
213KB
-
MD5
514c8ba4c4dd9814191a79fb24601fa9
-
SHA1
2296f41556bfcf1414732f4eb9f4f58db81693be
-
SHA256
705f65f3c89fd225a9cb841f7039b36452937748d78f763a29e76450504e4545
-
SHA512
826eb11b713320ff9bf521bb7447b8dc89dc878a0a434f40fd6ce67d5b0bf1d02ba784c2ab8470aa5ad0ce11047ef8cd94d46dd2c0b91a80a6a5d4c5117081b6
-
SSDEEP
3072:p0eqTp4biALbUGc065Q07btsHQkntGpbooL58a4j1z:eJTp4bnLbHb07btYDwv8a4jp
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.514c8ba4c4dd9814191a79fb24601fa9.exe
Files
-
NEAS.514c8ba4c4dd9814191a79fb24601fa9.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
cghghowe Size: 151KB - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cghghowe Size: 55KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ