Behavioral task
behavioral1
Sample
20f461e3077df1d59183bb2cf73e90cf.exe
Resource
win7-20231215-en
General
-
Target
20f461e3077df1d59183bb2cf73e90cf
-
Size
195KB
-
MD5
20f461e3077df1d59183bb2cf73e90cf
-
SHA1
69998fca43349501dde318681bab249ddaef5fa4
-
SHA256
8a5141a753b4241352084f5573243291078e70f431efa2aab2901684c270d58b
-
SHA512
7f4797f41e88b7f44965e76c2b571df69cd4d8af738f05c1611a18649308fbfc1e969664f82a6b7fdd4b05057d3648789d020b432715c84e4ab2b439e2f3a1f8
-
SSDEEP
3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhO:gExhk7rh7NEOIYWlPM6r6O
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20f461e3077df1d59183bb2cf73e90cf
Files
-
20f461e3077df1d59183bb2cf73e90cf.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYSGDTTE Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYSGDTTE Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE