Behavioral task
behavioral1
Sample
NEAS.42ae3806c2d777cb63f6f231a059e2b0_JC.exe
Resource
win7-20231020-en
General
-
Target
NEAS.42ae3806c2d777cb63f6f231a059e2b0_JC.exe
-
Size
231KB
-
MD5
42ae3806c2d777cb63f6f231a059e2b0
-
SHA1
36dba8e61d6ed3cf7eccbd2315a56b2563878644
-
SHA256
fcda2aa88bf079a7afe590f7f49a2b1c7fbf874e5b96c699cc5d3b8a0b93d098
-
SHA512
f8545a94d04f37f6b0c0d25c4b47b4b8b519a7bc5ee1666736d7cf9bbb1c3a7884c4ce17323338190f07e29f2568d15ce076ec984f1f9fb1bc03d4abb5b60937
-
SSDEEP
3072:Adrb8W+tGKqLDphy9q65kOVp4lwlq1/9l53GdeItG+XNcX8d:A1QW+tGFLVRXOVuwlqpAN4sd
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.42ae3806c2d777cb63f6f231a059e2b0_JC.exe
Files
-
NEAS.42ae3806c2d777cb63f6f231a059e2b0_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
bsdishfh Size: 151KB - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bsdishfh Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ