Behavioral task
behavioral1
Sample
1966ce1bbfdfcc4d6f51409c66ad7657.exe
Resource
win7-20231215-en
General
-
Target
1966ce1bbfdfcc4d6f51409c66ad7657
-
Size
184KB
-
MD5
1966ce1bbfdfcc4d6f51409c66ad7657
-
SHA1
d5d7b5bfdefe8b9cfa2a69338a4a908061e3b31d
-
SHA256
7b46eae0c813a6f4985e5dcf9e8d76a78ee38bf359855b3adfc49a8ba5fa2517
-
SHA512
f00d8d5f485598d4b701dc6eb550c09f83ee971e3f7ddd1855404405ca716a923df9b15c7b7286468c269b7669bf47714b71cadff0929b412d7c29eb6d333983
-
SSDEEP
3072:1tpCP+/oGvWSldHy64T9fQmZ+luXwy2f9LDh5p:Tp+IrvNyhhh4yfWv9
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1966ce1bbfdfcc4d6f51409c66ad7657
Files
-
1966ce1bbfdfcc4d6f51409c66ad7657.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
TYSGDGYS Size: 128KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TYSGDGYS Size: 55KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE