Behavioral task
behavioral1
Sample
38c7d035919fffdb33e1aada0fd48181.exe
Resource
win7-20240221-en
General
-
Target
38c7d035919fffdb33e1aada0fd48181
-
Size
356KB
-
MD5
38c7d035919fffdb33e1aada0fd48181
-
SHA1
b651870adca63c825a9ad2e6fadc4e87539506df
-
SHA256
ee8e9d1543cad03d2631b5e02ef985f4db0864c143008477f175ff786aed585d
-
SHA512
afc49a07b187dc10570bbd193a26da330c202551c276855f065cbde9df0c08e61f2ff35517b2882dcf43818b70375b4d559bcdeea04e83f411e9648414c90191
-
SSDEEP
6144:d09g16vl/rOlA2//whEp0Gd1EL0F921aZL1+p9D6UFEMk02lhH:v2Ol1//whEp0Gd1E8921Uu6cEt9PH
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38c7d035919fffdb33e1aada0fd48181
Files
-
38c7d035919fffdb33e1aada0fd48181.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
dssdffff Size: 247KB - Virtual size: 276KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dssdffff Size: 96KB - Virtual size: 100KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ