Behavioral task
behavioral1
Sample
8f62e85b6234086b2d8cdeff2eaaec891602d777d946a64c35f0a8831a4cbc61.exe
Resource
win7-20240221-en
General
-
Target
8f62e85b6234086b2d8cdeff2eaaec891602d777d946a64c35f0a8831a4cbc61
-
Size
999KB
-
MD5
804524de8c35e0f453cfccc83a5f4726
-
SHA1
6e476f64aeec26e3cefb02ed46d0cbbd6a48a60d
-
SHA256
8f62e85b6234086b2d8cdeff2eaaec891602d777d946a64c35f0a8831a4cbc61
-
SHA512
8c8549ee9e55bf4da6e8250c9fd5ae8cd92e0eee4a8ee1a7282360c8c9dc5e20beb8ce875581dd3246e7e017d9676054d53b962f03a91050977d16c55edb0ac3
-
SSDEEP
24576:1ydHl4Vi6qm7Aa1UaW7J5RzkF2o5x6RrAyB:wl4Viw7zUTNQF2o6xB
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f62e85b6234086b2d8cdeff2eaaec891602d777d946a64c35f0a8831a4cbc61
Files
-
8f62e85b6234086b2d8cdeff2eaaec891602d777d946a64c35f0a8831a4cbc61.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GGFDSDTY Size: 548KB - Virtual size: 584KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GGFDSDTY Size: 437KB - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ