Behavioral task
behavioral1
Sample
NEAS.6bbffcef54047859b7ced9561a27acf0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.6bbffcef54047859b7ced9561a27acf0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6bbffcef54047859b7ced9561a27acf0.exe
-
Size
208KB
-
MD5
6bbffcef54047859b7ced9561a27acf0
-
SHA1
cff835ca1168b4761202d5f229aec3ac27618e00
-
SHA256
6d2a8ae51be8f5dac2896b33c04b51e1d429ffa1019aeb08e42a8ebdab9b8b0b
-
SHA512
bf0fe28d78a6bb36454344e306b1168c3767ce51b5a9f924e821e22babff02bc6ddbf614c05624d7144130008216c24180e9fcb48d650e283fe9550ab2244fa7
-
SSDEEP
3072:Yc2jyketdXpW2dMrlPIEM6xY0e7OIgPDFIbbzhPM67fIh:8jtmXz0lwBQWOIYWlPM6r6
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6bbffcef54047859b7ced9561a27acf0.exe
Files
-
NEAS.6bbffcef54047859b7ced9561a27acf0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYSGDTTE Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYSGDTTE Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE