Behavioral task
behavioral1
Sample
NEAS.50c59efd0f45edfc5d92a4a9e438ac70.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.50c59efd0f45edfc5d92a4a9e438ac70.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.50c59efd0f45edfc5d92a4a9e438ac70.exe
-
Size
440KB
-
MD5
50c59efd0f45edfc5d92a4a9e438ac70
-
SHA1
060c396f404b5b75cc0a10ec9c0f87c936a7fe20
-
SHA256
99ada41d3bab7893157180424e661f3a8c05e4df5673c22d377037447dacdf1b
-
SHA512
0eaf93f6342e441d7a1245d9dbc526138dfa0f9cf7ebe4fde887efd5e772a56faabd4c76a6fb5aaa5f188d27b0032e12657e45e79f2b594a0f9990a019175aa9
-
SSDEEP
6144:YgAJymdHqF0CWifrNgi3caOHO5NjEwwiYWB5mVp+:23dHq6CWQ3hOHOHz9JQA
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.50c59efd0f45edfc5d92a4a9e438ac70.exe
Files
-
NEAS.50c59efd0f45edfc5d92a4a9e438ac70.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 289KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE