Behavioral task
behavioral1
Sample
NEAS.961482dac6ccdd1bb2c284af9eca2988.exe
Resource
win7-20231020-en
General
-
Target
NEAS.961482dac6ccdd1bb2c284af9eca2988.exe
-
Size
191KB
-
MD5
961482dac6ccdd1bb2c284af9eca2988
-
SHA1
a09971e67277771e17dbe8bfd855060e2cb6c3a0
-
SHA256
51e65f25099dc59c83b74edcef02d842576b5054ab3a8bcfe43f9c77b2c6d6e5
-
SHA512
062be3e4eb62b11ebdf293f58f70b4a4139b5d11dd1e1c07e969126941cf702460b30fbb5271564ff90f8e33daa625d3f5bb888d4ad089dac74b301f9318a29c
-
SSDEEP
3072:EAwixCZ6Sh77R2Gpf606U8vCIgPDFIbbzhPM67fIhme7S:EExhk7rh7NFIYWlPM6r61S
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.961482dac6ccdd1bb2c284af9eca2988.exe
Files
-
NEAS.961482dac6ccdd1bb2c284af9eca2988.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYSGDTTE Size: 128KB - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYSGDTTE Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ