Behavioral task
behavioral1
Sample
NEAS.6c98f8e20b5d94d60ab06f8a55a5a6a0_JC.exe
Resource
win7-20231023-en
General
-
Target
NEAS.6c98f8e20b5d94d60ab06f8a55a5a6a0_JC.exe
-
Size
1002KB
-
MD5
6c98f8e20b5d94d60ab06f8a55a5a6a0
-
SHA1
8b5b1a10bf0d3601c0797968c9747048c0e254e1
-
SHA256
21ec245ecc2bc24790c0548c7834f8729d0d24334aaec7dbe4e6f9aa615b0a39
-
SHA512
c0483d6e5b6fd5924b251cc09f1d1acd8f75e133d52e61cd6f2424788aa0407a918054aa8aaa9b9a63d8357bd11bdd077dd9a5fc0c2f0b0dd8008924939a849c
-
SSDEEP
24576:5ydHl4Vi6qm7Aa1UaW7JxRzkF2o5x6RrAy9:sl4Viw7zUTpQF2o6x9
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6c98f8e20b5d94d60ab06f8a55a5a6a0_JC.exe
Files
-
NEAS.6c98f8e20b5d94d60ab06f8a55a5a6a0_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GGFDSDTY Size: 560KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GGFDSDTY Size: 437KB - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE