Behavioral task
behavioral1
Sample
1440987791c048c0d340e10a44879517.exe
Resource
win7-20231129-en
General
-
Target
1440987791c048c0d340e10a44879517
-
Size
777KB
-
MD5
1440987791c048c0d340e10a44879517
-
SHA1
e2030294cf4282c51e537b0aefeb5fe9d97e6aa6
-
SHA256
68edce5b890e064f8b127b47bae77a51a41b9b29ae2455962f39d3ea5f3de03d
-
SHA512
c1d2625f4e287e1bc00671b80a70967e777d06e167e650d076fe37d2aac064a9312594419639a42c8cad170f720f7826a833f6634836a698b9409acce3071fe8
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c11:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8e
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1440987791c048c0d340e10a44879517
Files
-
1440987791c048c0d340e10a44879517.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
IOKGDTTY Size: 464KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IOKGDTTY Size: 310KB - Virtual size: 312KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE