Behavioral task
behavioral1
Sample
aabb3ad22745bf2957265ecb89ee43aa8c7b5a20ab451fd7dea0f45e108e1087.exe
Resource
win7-20231025-en
General
-
Target
aabb3ad22745bf2957265ecb89ee43aa8c7b5a20ab451fd7dea0f45e108e1087
-
Size
197KB
-
MD5
0f57e9244e178d9efa38e637a168c4ad
-
SHA1
50d22f20b4f5005dae30fd4a58ae5d9e20731b51
-
SHA256
aabb3ad22745bf2957265ecb89ee43aa8c7b5a20ab451fd7dea0f45e108e1087
-
SHA512
11fd825e0574834f665cf6416df9331bb87e55d9adfd652c91f2aee5774fcecad4630ac9a125243539874b1394200f042e1f48d9f63f0b10b1d207463cedfed7
-
SSDEEP
3072:nl6CNlACeMKV6ETiiXd60irnsegFWL5QJReMSJN4at5:nQCNSv6p8lOseQWLyJQ3Ji65
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aabb3ad22745bf2957265ecb89ee43aa8c7b5a20ab451fd7dea0f45e108e1087
Files
-
aabb3ad22745bf2957265ecb89ee43aa8c7b5a20ab451fd7dea0f45e108e1087.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GSUDUHUW Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GSUDUHUW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE