Behavioral task
behavioral1
Sample
NEAS.529eb072afc45f21ea3c1e1f8246b7a0.exe
Resource
win7-20231020-en
General
-
Target
NEAS.529eb072afc45f21ea3c1e1f8246b7a0.exe
-
Size
197KB
-
MD5
529eb072afc45f21ea3c1e1f8246b7a0
-
SHA1
10a849693b35dd1ae4b6b5b1b9b2d802d66f5192
-
SHA256
07f58d41fbb04465e7b9de10d0b321d8ba23948db833340affe29958c4163b7a
-
SHA512
c8c8e8c1588c2034cc770c3142c24c45916397563ee411c47c17d0b77aa2aaf2e0ea4e2bd84f82ed69e9fd9e435a36fd160256d83a24eee29e40f6109764691c
-
SSDEEP
3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhgL4SYHJ:gExhk7rh7NEOIYWlPM6r6WYp
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.529eb072afc45f21ea3c1e1f8246b7a0.exe
Files
-
NEAS.529eb072afc45f21ea3c1e1f8246b7a0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYSGDTTE Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYSGDTTE Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE