Behavioral task
behavioral1
Sample
NEAS.49f121d31325db7b9aeb07642e508110.exe
Resource
win7-20231023-en
General
-
Target
NEAS.49f121d31325db7b9aeb07642e508110.exe
-
Size
468KB
-
MD5
49f121d31325db7b9aeb07642e508110
-
SHA1
ca2c5329ea9dc1b9e9b0890bd8d63a71e662c0ac
-
SHA256
2ec506fd184bd9e4b8b1e41b27f7f4da03009343bf863937cb33fc0ab573e4c0
-
SHA512
b6145bf0f14eeba94684e4bd951b1906ad26185137ab3e4cf1834e12b282ebd473604013df41929d5ed4a19e40f5b305dc8d83080445bcf6dd27bc39b8d75eb5
-
SSDEEP
6144:qmbmLppYOuakYbVAvhExy1gO8B9vhMQqATCSw2wp:qma6id6TsrhS8/w
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.49f121d31325db7b9aeb07642e508110.exe
Files
-
NEAS.49f121d31325db7b9aeb07642e508110.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE