Behavioral task
behavioral1
Sample
bbd0e8321bacb933df651b1927fe6ae6.exe
Resource
win7-20240221-en
General
-
Target
bbd0e8321bacb933df651b1927fe6ae6
-
Size
184KB
-
MD5
bbd0e8321bacb933df651b1927fe6ae6
-
SHA1
439f7ee6a7ffb70da16541e6474ff8190d98d486
-
SHA256
f21be2a0ac03911b233b29ef7d6d70b1dab9788304254524e942b0571a4ae796
-
SHA512
7345d4fa1844fae80bb14c325dabbb775583ac1d3a37075206c5e80a5e0d7a10bcb7af221f8a3c389981ace689753e9f3f1418b6895b7006b0a37dea8438c69e
-
SSDEEP
3072:1tpCP+/oGvWSldHy64T9fQmZ+luXwy2f9LDh5Z:Tp+IrvNyhhh4yfWv1
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbd0e8321bacb933df651b1927fe6ae6
Files
-
bbd0e8321bacb933df651b1927fe6ae6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
TYSGDGYS Size: 128KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TYSGDGYS Size: 55KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE