Behavioral task
behavioral1
Sample
83ffdb098a50351c04c39baf0b77d37d15b23f02713ce510a41a7f422b2a62c8.exe
Resource
win7-20240215-en
General
-
Target
83ffdb098a50351c04c39baf0b77d37d15b23f02713ce510a41a7f422b2a62c8
-
Size
417KB
-
MD5
bb76a6fce93c71de45907c0aaa324936
-
SHA1
0bade8ea585a3af053ee3f0562a2cbde2efdb2bc
-
SHA256
83ffdb098a50351c04c39baf0b77d37d15b23f02713ce510a41a7f422b2a62c8
-
SHA512
c512021052d37429c80565fa19b02930f2622720a1ed39a24e3b0e3077cac9f19547a25c89959017d4a587cd1559b4e578f58ce1b481099fcf7da512496eaabe
-
SSDEEP
6144:TzU7blK2P2iCWhWapKRaRXOkN4Swel6f3IsIZOmoIj:vU7M1ijWh0XOW4sEf4OO
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83ffdb098a50351c04c39baf0b77d37d15b23f02713ce510a41a7f422b2a62c8
Files
-
83ffdb098a50351c04c39baf0b77d37d15b23f02713ce510a41a7f422b2a62c8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE