Behavioral task
behavioral1
Sample
0bf5f3c1f48917dfd51c9e6e662dbdcf.exe
Resource
win7-20231215-en
General
-
Target
0bf5f3c1f48917dfd51c9e6e662dbdcf
-
Size
782KB
-
MD5
0bf5f3c1f48917dfd51c9e6e662dbdcf
-
SHA1
0dece3a9762f60c8b326bd5800cb9d54555b58d5
-
SHA256
d8be9d9de7092b85a892a31146662759a7f2714e246c2cf1700ae48c9c4c4870
-
SHA512
12904b98247451e63aadf9195b547d5605c55a17d1ffb01250bec171844ecc629da26568cc7580a814be04c13b30a0682cd63333e15b342748eba222f74d588b
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1V:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8Q
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bf5f3c1f48917dfd51c9e6e662dbdcf
Files
-
0bf5f3c1f48917dfd51c9e6e662dbdcf.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
IOKGDTTY Size: 464KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IOKGDTTY Size: 310KB - Virtual size: 312KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE