Behavioral task
behavioral1
Sample
NEAS.4fd3c0aa6a54cffa21cdfd1880192220.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.4fd3c0aa6a54cffa21cdfd1880192220.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.4fd3c0aa6a54cffa21cdfd1880192220.exe
-
Size
404KB
-
MD5
4fd3c0aa6a54cffa21cdfd1880192220
-
SHA1
f9b3e07e2273c6b6c94fd934f19b83e048feb230
-
SHA256
81e51031f55b2c2fc887fc146d7b730a3aa3397a32364db0bb684dc891defc9d
-
SHA512
845d1101756e6e0f6c316dc740b747418969f1a389051fbae4e337e577c6fc5268641a7905935582d7d536ffbdbf8c5326763743d11b7f62edb40bb8a26f38d4
-
SSDEEP
6144:l+2PLWDA0at6jLxgUf3pn/URBudL7qRBpkvfsModogZ/SvnDTH9Q:EESDA0at4aoe8L7qRbQUugennH
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4fd3c0aa6a54cffa21cdfd1880192220.exe
Files
-
NEAS.4fd3c0aa6a54cffa21cdfd1880192220.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 364KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE