Behavioral task
behavioral1
Sample
NEAS.136ac88a0fe26a222b189b7e85bc1a80_JC.exe
Resource
win7-20231020-en
General
-
Target
NEAS.136ac88a0fe26a222b189b7e85bc1a80_JC.exe
-
Size
382KB
-
MD5
136ac88a0fe26a222b189b7e85bc1a80
-
SHA1
48045b4e9ca62a6ee1ab95d65b5a1319670e4e40
-
SHA256
d55192555c89a51ebe34623338eb32cc2e629fd7d02dedd8a564bcefed1703ae
-
SHA512
b59a986ac644b89b0a1cfdfbe16a1db5ab959c2de4ff1f58d51fbe298c02a61da2d89f68d31aaa61a991359327de7d9226771f8896f1368184e8a2cdea8b81df
-
SSDEEP
6144:eQiWreSUbn8y5+l/bRzBiw5G4DrA3vpt6t3tj5xC6qpbbT:eMr6bwzRF75G44vpt6XjCX
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.136ac88a0fe26a222b189b7e85bc1a80_JC.exe
Files
-
NEAS.136ac88a0fe26a222b189b7e85bc1a80_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 228KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ