Behavioral task
behavioral1
Sample
c3f5dc0ef0c5ce86c10feb602edbe6a3be24177d52608f8f127967b158a1d3a0.exe
Resource
win7-20240221-en
General
-
Target
c3f5dc0ef0c5ce86c10feb602edbe6a3be24177d52608f8f127967b158a1d3a0
-
Size
487KB
-
MD5
7b4680c1c19a6d291953f25d24e76b45
-
SHA1
43ce5530346df5fe3bcb773bc00a40b934ad2a1c
-
SHA256
c3f5dc0ef0c5ce86c10feb602edbe6a3be24177d52608f8f127967b158a1d3a0
-
SHA512
8394837fd731945faad3c593a7b85e1220bd0fb048fae25fa04551a3f64e5dd33c4d99f07d8c15d9b33f36c7161466e18763b9cb629ec99d11a6c32276ea5834
-
SSDEEP
12288:Vpbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbe+:VpbXi5xzFUBaazsiofx83
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3f5dc0ef0c5ce86c10feb602edbe6a3be24177d52608f8f127967b158a1d3a0
Files
-
c3f5dc0ef0c5ce86c10feb602edbe6a3be24177d52608f8f127967b158a1d3a0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 152KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 245KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ESER Size: 28KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE