Behavioral task
behavioral1
Sample
addc22508159419cd43aea55bf016313.exe
Resource
win7-20240221-en
General
-
Target
addc22508159419cd43aea55bf016313
-
Size
196KB
-
MD5
addc22508159419cd43aea55bf016313
-
SHA1
d380cb75a619e952bc69b0b195c503c1317661f6
-
SHA256
1b1d2f0065cc2bd8835f8330300e0a4b4e5b49822010a004edc5d37bca94520b
-
SHA512
fbe3ed274e98942c68a706f04c8c4654bbb045700fbfe15136045cc94ffb549694c37e1743710e9cba172f660d45e431c95e7839c13ec2e3beb9ecab82b22c00
-
SSDEEP
3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhgLi:gExhk7rh7NEOIYWlPM6r63
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource addc22508159419cd43aea55bf016313
Files
-
addc22508159419cd43aea55bf016313.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYSGDTTE Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYSGDTTE Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE