Behavioral task
behavioral1
Sample
e29d8f1cca12e3793d5076dec239d577171759481f9fda23ee430631eabaa186.exe
Resource
win7-20240215-en
General
-
Target
e29d8f1cca12e3793d5076dec239d577171759481f9fda23ee430631eabaa186
-
Size
168KB
-
MD5
d36552b15566cf2e616e802808aa4229
-
SHA1
8408567cfd4e179b2726b0d261c99e2c8b1e809c
-
SHA256
e29d8f1cca12e3793d5076dec239d577171759481f9fda23ee430631eabaa186
-
SHA512
4464f3f94b694f8fc903fb073b2378744657b332e0af250be7dab974d797930f21582220cc5eca9e933329f49b3e1b6d171a2dad849f71bdb95e410be4de2a8a
-
SSDEEP
1536:abRaQSPc3vjvdRiHhhU1Kn1LtMQr54xzId4uP7dsaTdpU+gyxmOokYpD84dqa/:iNN3vhRiDaEd4uPpsaBrxRokYpD8Pa/
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e29d8f1cca12e3793d5076dec239d577171759481f9fda23ee430631eabaa186
Files
-
e29d8f1cca12e3793d5076dec239d577171759481f9fda23ee430631eabaa186.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HYSDHSD Size: 27KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE