Behavioral task
behavioral1
Sample
NEAS.f002eb38264f1d15daf6e881e875a090_JC.exe
Resource
win7-20231023-en
General
-
Target
NEAS.f002eb38264f1d15daf6e881e875a090_JC.exe
-
Size
767KB
-
MD5
f002eb38264f1d15daf6e881e875a090
-
SHA1
82c1237568af4cf5928a081545ded8f89d0c566b
-
SHA256
ec9316b17970d28ce87e80e93168ceacbcf155df4a424584ac9710f34194d8a4
-
SHA512
f0c3b53f48e4924c83d5a7e754935dcbd76e16b9fcf6436e2923fca341b3e3956f1ea46b7c599fa63936905ca53d1f2547b77abff0008750549174c2254fd0b7
-
SSDEEP
12288:jvxpKydQKhJ89I18UpiZMRIU2WUWvXbX5g7pW7JXh65/mXiu+QP2Tr5V1iRTLnf:jZpKydl4ZMIU5FgkOAStoW1V1iRTD
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f002eb38264f1d15daf6e881e875a090_JC.exe
Files
-
NEAS.f002eb38264f1d15daf6e881e875a090_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
KHdfgr Size: 460KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KHdfgr Size: 303KB - Virtual size: 304KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE