Behavioral task
behavioral1
Sample
07dbaffe7b6cd69ba7f89d79fe3c9a641d4839516bdb8c9983cc1f1502779ac2.exe
Resource
win7-20240220-en
General
-
Target
07dbaffe7b6cd69ba7f89d79fe3c9a641d4839516bdb8c9983cc1f1502779ac2
-
Size
202KB
-
MD5
ab7d1a796d4bed8f4dea177609e065cc
-
SHA1
483376c69d10e499dcdd0c91f974eccd41bc3bbd
-
SHA256
07dbaffe7b6cd69ba7f89d79fe3c9a641d4839516bdb8c9983cc1f1502779ac2
-
SHA512
e25df89da302848f25a371c0a370f2a67805cdcd78275ef5a61b535e06ac50baf9dcb17674b119680a7e1eb08d53acf5d746a8f4e764e1d2e117588d2e0da0f4
-
SSDEEP
3072:3yuTOfolTlYHB+HYoIe+t7R8fU6n86FHR4:3yuTOf+Tl2He+T0aSHa
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07dbaffe7b6cd69ba7f89d79fe3c9a641d4839516bdb8c9983cc1f1502779ac2
Files
-
07dbaffe7b6cd69ba7f89d79fe3c9a641d4839516bdb8c9983cc1f1502779ac2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UIJDHTEY Size: 143KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UIJDHTEY Size: 47KB - Virtual size: 48KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ