Behavioral task
behavioral1
Sample
78570dac5d98a53190bc5803a188c5cef2666c58d421bfd28547d5e6caff53af.exe
Resource
win7-20240221-en
General
-
Target
78570dac5d98a53190bc5803a188c5cef2666c58d421bfd28547d5e6caff53af
-
Size
417KB
-
MD5
eafa2454b57dc341ad9acfbd60f6876c
-
SHA1
768d91ec07f7a4e636e7df1c5174f280d61f0d62
-
SHA256
78570dac5d98a53190bc5803a188c5cef2666c58d421bfd28547d5e6caff53af
-
SHA512
e5315102e22a37a44f68b6f3a904352837947567003170321133eef7d3f798825c5d1fa5246358143224e34fb476e2321e84e1331850325a65fea4c761468967
-
SSDEEP
6144:TzU7blK2P2iCWhWapKRaRXOkN4Swel6f3IsIZOmop:vU7M1ijWh0XOW4sEf4O3
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78570dac5d98a53190bc5803a188c5cef2666c58d421bfd28547d5e6caff53af
Files
-
78570dac5d98a53190bc5803a188c5cef2666c58d421bfd28547d5e6caff53af.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE