Behavioral task
behavioral1
Sample
45c7b66f91e050247f261d0fee564893.exe
Resource
win7-20231215-en
General
-
Target
45c7b66f91e050247f261d0fee564893
-
Size
236KB
-
MD5
45c7b66f91e050247f261d0fee564893
-
SHA1
db195a79223e9f332f6726d7daca9038167da184
-
SHA256
49b8e5a9fc1c60f0f5d7b54b3f4d8e05773f161dc7263971662382d441f7dda3
-
SHA512
8fb2c55c83dbe7c6f667d2e5d2a42a045f1d5db2a671afe33a072227262b398ec3fcc5ce4ce8d77caa9c64d9a559b3a436f695c4a2e1e095df0f4dfae18a9511
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2x:ZASpvo0LKkRzpxJ2kRqroix
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45c7b66f91e050247f261d0fee564893
Files
-
45c7b66f91e050247f261d0fee564893.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
BIDJOWDP Size: 155KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BIDJOWDP Size: 79KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE