Behavioral task
behavioral1
Sample
NEAS.fc18f18c5dc9a9bf41df9c66f2e08780.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.fc18f18c5dc9a9bf41df9c66f2e08780.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.fc18f18c5dc9a9bf41df9c66f2e08780.exe
-
Size
280KB
-
MD5
fc18f18c5dc9a9bf41df9c66f2e08780
-
SHA1
7e6bbd5a159e5492465ad7937d95bd6de5154c71
-
SHA256
fe750a88e2c0b37fb973d4478dd286eda19920b7214d091c76a4a37c5ead6dde
-
SHA512
f1fcfa3a11d126b3e87e1c2463ff058880ef06c25caedf4faf6eb4d3fa4b3ba2510e5fadc7cbf98f82f818daed712bf88e03b64b22a700031d7e109a2fb82633
-
SSDEEP
3072:Mu/+MvFOjKP6NXdiu1cKbOC6vn4yW/KME:MX692diHoicW
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fc18f18c5dc9a9bf41df9c66f2e08780.exe
Files
-
NEAS.fc18f18c5dc9a9bf41df9c66f2e08780.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 141KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE