Behavioral task
behavioral1
Sample
NEAS.fed7f51efadfbeee0b844d39e8648480_JC.exe
Resource
win7-20231020-en
General
-
Target
NEAS.fed7f51efadfbeee0b844d39e8648480_JC.exe
-
Size
191KB
-
MD5
fed7f51efadfbeee0b844d39e8648480
-
SHA1
f536fe4d0670f95c27ffdfce27c3d5799f24fb56
-
SHA256
5932ee1c7be67c20c25aca43b3455a95f55dce9e983d52f04fdd45544a093745
-
SHA512
e83a31b6e8b0b01f8b501c5d80315ef866b79602dab20066fde110481db8b1dc7bb820bb67df4fce02aeba5fc9711da4ac5f103025eb235acea7d40bd261edfc
-
SSDEEP
3072:mqp2cKm5DI/OQf6B6E8wervMLN78FWY6uGKq0FA1k:m8la5aF4jMLh85A6
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fed7f51efadfbeee0b844d39e8648480_JC.exe
Files
-
NEAS.fed7f51efadfbeee0b844d39e8648480_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
BHSHDGGW Size: 133KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BHSHDGGW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE