Behavioral task
behavioral1
Sample
NEAS.08eb2bdb18c2e95e668dd6ba7ab1ee00_JC.exe
Resource
win7-20231020-en
General
-
Target
NEAS.08eb2bdb18c2e95e668dd6ba7ab1ee00_JC.exe
-
Size
206KB
-
MD5
08eb2bdb18c2e95e668dd6ba7ab1ee00
-
SHA1
c83aa296bae2e1cca56f431af2f203dae8235d6a
-
SHA256
3edbd34d10619971fd234b36af070610b44de207ce0a3b8982933897b3f7b5a2
-
SHA512
34a31f3835fead55479b4a5dc1e4ca458fae5dc1feb3b1486e4777167faba87a637a445bb0869a50ff70bd840a2559098e0e54f3b5395682dd3993f7c7c643ca
-
SSDEEP
3072:L35mFRH2RidZlP1vaiOjqok3pNAiQ5h/6QUsNl/gB0:L35mFRWRUvPhT73pKfh/6QUsR
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.08eb2bdb18c2e95e668dd6ba7ab1ee00_JC.exe
Files
-
NEAS.08eb2bdb18c2e95e668dd6ba7ab1ee00_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
YUSDHSFS Size: 147KB - Virtual size: 156KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YUSDHSFS Size: 53KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ