Behavioral task
behavioral1
Sample
NEAS.fcfeef990e9adcdb1f849dc1c9903ab0.exe
Resource
win7-20231025-en
General
-
Target
NEAS.fcfeef990e9adcdb1f849dc1c9903ab0.exe
-
Size
355KB
-
MD5
fcfeef990e9adcdb1f849dc1c9903ab0
-
SHA1
2c46363f64b514ebe4b0ac4f1157b9583180c861
-
SHA256
c8f69d94ef15e08ac5c19bf6e52c0f9d38d988dc90e6d42fd5bc043809fa0573
-
SHA512
6472b13546e73f601ea1449b5ec05b28b8a88d9cfa3a33e833702853e685cde6f8e642f763a71c3170bb505a8d45050fa12295f374b37edb63bdd8039bc18012
-
SSDEEP
6144:q09g16vl/rOlA2//whEp0Gd1EL0F921aZL1+p9XD6UFEMk02lI1:A2Ol1//whEp0Gd1E8921UCz6cEt9q
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fcfeef990e9adcdb1f849dc1c9903ab0.exe
Files
-
NEAS.fcfeef990e9adcdb1f849dc1c9903ab0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
dssdffff Size: 256KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dssdffff Size: 96KB - Virtual size: 100KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE