Behavioral task
behavioral1
Sample
NEAS.56e6c5c30bd3b5d86e1c83fe54f49e10.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.56e6c5c30bd3b5d86e1c83fe54f49e10.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.56e6c5c30bd3b5d86e1c83fe54f49e10.exe
-
Size
208KB
-
MD5
56e6c5c30bd3b5d86e1c83fe54f49e10
-
SHA1
ea2708e759e4f62b2507968d97631d4df4ae10f6
-
SHA256
a316afc7828ca28ffecbce70de113c9d916bb7db61bb7d47fe4c92ac965c5693
-
SHA512
c11f4a0df005edf340ee6f768dd1818e620b1b953b238dabffa027f7ee69137bb8c38d580ee7b91ec89a01d3f3ac8ee22f007cad42a2f78da77b0351146e8377
-
SSDEEP
3072:HRUWC8hoH4KBAZV6irervMLN78FWY6uGKq0F:xqb2HyjMLh85
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.56e6c5c30bd3b5d86e1c83fe54f49e10.exe
Files
-
NEAS.56e6c5c30bd3b5d86e1c83fe54f49e10.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
BHSHDGGW Size: 133KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BHSHDGGW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE