Behavioral task
behavioral1
Sample
887e572fe97bbbdc9195474c84cfe28f.exe
Resource
win7-20231129-en
General
-
Target
887e572fe97bbbdc9195474c84cfe28f
-
Size
198KB
-
MD5
887e572fe97bbbdc9195474c84cfe28f
-
SHA1
e7d0b1c7fcc552bde81e2eab6fe707305fe04567
-
SHA256
b588ad5d6749245d8c0f9509ff77808d6b5f8a021014d403b9a81c548ec6d4a4
-
SHA512
6dd17f1140787cf8a27c6fb90a51b32dddf49c348bf23611c576c22682952cee1deba2df4a5473531ecb1521e7a5728473d895018a25092a02f0935845d0a9aa
-
SSDEEP
3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhAf:gExhk7rh7NEOIYWlPM6r62
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 887e572fe97bbbdc9195474c84cfe28f
Files
-
887e572fe97bbbdc9195474c84cfe28f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYSGDTTE Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYSGDTTE Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE