Behavioral task
behavioral1
Sample
NEAS.050e5ea66e1421f163c4b76e46a7c946.exe
Resource
win7-20231025-en
General
-
Target
NEAS.050e5ea66e1421f163c4b76e46a7c946.exe
-
Size
412KB
-
MD5
050e5ea66e1421f163c4b76e46a7c946
-
SHA1
5ad3808a12826c1989b7504a884d4040bffef4d9
-
SHA256
5c119642e5e70cc4c39784d4ee053c42941d98cfe06f98dcb39a1632ec3f56e4
-
SHA512
2b4d5fd5f0c5b306add32637f71fc8b63045bc1b7ce39c2713fe6ba8a7db69cb21113d298689fb5ea899e64ed43b3dc8a45a7c0593aa50e98ddbb297486a48db
-
SSDEEP
6144:TzU7blK2P2iCWhWapKRaRXOkN4Swel6f3IsIZOmo2:vU7M1ijWh0XOW4sEf4OQ
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.050e5ea66e1421f163c4b76e46a7c946.exe
Files
-
NEAS.050e5ea66e1421f163c4b76e46a7c946.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE