Behavioral task
behavioral1
Sample
2cc40bbbc57fa93cce7840c87aaf1899.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
2cc40bbbc57fa93cce7840c87aaf1899.exe
Resource
win10v2004-20231201-en
General
-
Target
2cc40bbbc57fa93cce7840c87aaf1899
-
Size
237KB
-
MD5
2cc40bbbc57fa93cce7840c87aaf1899
-
SHA1
0a209f3d80de6bd9b632c46fbf3352a53254f1fc
-
SHA256
143ef53a0fa6ed1b987a5ab0538bcb2aa43e315f708a34473dea7fd1b2f2321e
-
SHA512
b499c1ad632e89f4ee54934769ba798a90202073a28d7aab1b61d20fd4062a5bed192447f99469c0654219630f729af3ef837b4cac43fbc0ab704193e49935d7
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2r:ZASpvo0LKkRzpxJ2kRqroir
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cc40bbbc57fa93cce7840c87aaf1899
Files
-
2cc40bbbc57fa93cce7840c87aaf1899.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
BIDJOWDP Size: 155KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BIDJOWDP Size: 79KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE