Behavioral task
behavioral1
Sample
NEAS.a7f3a668b7f3a3d732204a772aa8d57e.exe
Resource
win7-20231020-en
General
-
Target
NEAS.a7f3a668b7f3a3d732204a772aa8d57e.exe
-
Size
353KB
-
MD5
a7f3a668b7f3a3d732204a772aa8d57e
-
SHA1
8572f4f7550aa828f81893aff82ecd6e458022a0
-
SHA256
0d09a04a4fd0363e1518843df93fe5d2281af567c6f7a7fd8a13508724d46814
-
SHA512
0cc7971c4ad4ce5b778744083985382facb0a41be0dd03894509123e18752a5e8f74ac1bf0949a266b89cf3445bb2dce63337614d570d461122c52a633cb4570
-
SSDEEP
6144:d09g16vl/rOlA2//whEp0Gd1EL0F921aZL1+p9D6UFEMk02l17:v2Ol1//whEp0Gd1E8921Uu6cEt9b7
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a7f3a668b7f3a3d732204a772aa8d57e.exe
Files
-
NEAS.a7f3a668b7f3a3d732204a772aa8d57e.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
dssdffff Size: 247KB - Virtual size: 276KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dssdffff Size: 96KB - Virtual size: 100KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ