Behavioral task
behavioral1
Sample
4b6b1b718c55bcd1ce7631a0099e0b30.exe
Resource
win7-20231215-en
General
-
Target
4b6b1b718c55bcd1ce7631a0099e0b30
-
Size
195KB
-
MD5
4b6b1b718c55bcd1ce7631a0099e0b30
-
SHA1
d179a360e6f442aee240ecf6e5d663c3c06465db
-
SHA256
79ca175134b626e68bd8c46e03e10aca218d736fb32449cf9c7a4defea5effef
-
SHA512
8a384d9eb3655bd1b19fa8babb90e137b97b90e7e673999d6c1f6c9b9946696cafb4152a0a1e2b86fa20a4558a5092c2dcfa77b402fdd505f84b6f7654dc23bf
-
SSDEEP
3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhgLi:gExhk7rh7NEOIYWlPM6r6B
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b6b1b718c55bcd1ce7631a0099e0b30
Files
-
4b6b1b718c55bcd1ce7631a0099e0b30.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYSGDTTE Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYSGDTTE Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE