Behavioral task
behavioral1
Sample
NEAS.2e57461c2a299ef3de623e300603f770.exe
Resource
win7-20231020-en
General
-
Target
NEAS.2e57461c2a299ef3de623e300603f770.exe
-
Size
206KB
-
MD5
2e57461c2a299ef3de623e300603f770
-
SHA1
b9fd79cfa25069ff7453fcd2bb87b554e8da46d4
-
SHA256
c6dc573abd7e79d628d00a356181f25f22ea25d4ee919239558213871507f5b5
-
SHA512
f40fa8b7819679c25c5b1f7392972198b2c181b266ce0d0040facadad45b6b01d4bd2687ed7a7041d3863c1c6edeff671e034b2361e5d70b05735312d7bc4015
-
SSDEEP
3072:L35mFRH2RidZlP1vaiOjqok3pNAiQ5h/6QUsNl/gBk:L35mFRWRUvPhT73pKfh/6QUsL
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2e57461c2a299ef3de623e300603f770.exe
Files
-
NEAS.2e57461c2a299ef3de623e300603f770.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
YUSDHSFS Size: 147KB - Virtual size: 156KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YUSDHSFS Size: 53KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ