Behavioral task
behavioral1
Sample
NEAS.91ea6b28b749085c0cdc80a2c565227d_JC.exe
Resource
win7-20231025-en
General
-
Target
NEAS.91ea6b28b749085c0cdc80a2c565227d_JC.exe
-
Size
411KB
-
MD5
91ea6b28b749085c0cdc80a2c565227d
-
SHA1
0145b01646159472190daf67b5a2bd3c6f97fc9c
-
SHA256
4d739aa27b51ce5d94d18cc4ba59c3be8350b797cd0ee078117e346ee7817389
-
SHA512
2078df6db2b228661ced96f2d789ea50293fb0ca475cede4d569b736531b89936bd0bbb9ee318b01b5ab6f1cdec3a36aa7e2f076e82ff83d77901572d6c0f700
-
SSDEEP
6144:TzU7blK2P2iCWhWapKRaRXOkN4Swel6f3IsIZOmof:vU7M1ijWh0XOW4sEf4OF
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.91ea6b28b749085c0cdc80a2c565227d_JC.exe
Files
-
NEAS.91ea6b28b749085c0cdc80a2c565227d_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE