Behavioral task
behavioral1
Sample
NEAS.429125e7e88bfa725c02fa550f24c9d0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.429125e7e88bfa725c02fa550f24c9d0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.429125e7e88bfa725c02fa550f24c9d0.exe
-
Size
380KB
-
MD5
429125e7e88bfa725c02fa550f24c9d0
-
SHA1
b3228145531c1e242c8f386a7c16c9197000e072
-
SHA256
8506050eb4ca10d73aa9fd95904f3f2cad36424f05464d4e9e3962dc95ed8d96
-
SHA512
6b8ae5f4a4afcf4717dfd5a1f247dc17cff5f23f155b1093248e56cfc21e7ab6431641b8d9138fdaf119429f7626fa6b959e2c88b9b764a0ebc79528837fc8f8
-
SSDEEP
6144:2gVAK7xLIwadICH/wrKxW0+LsHdhWxVMp9XD6UFEMk02lI:CwadRH/wrKxW0+UWmz6cEt9
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.429125e7e88bfa725c02fa550f24c9d0.exe
Files
-
NEAS.429125e7e88bfa725c02fa550f24c9d0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
dssdffff Size: 256KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dssdffff Size: 96KB - Virtual size: 100KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE