Behavioral task
behavioral1
Sample
3e1ee35902e501553a21478b655b00da.exe
Resource
win7-20240215-en
General
-
Target
3e1ee35902e501553a21478b655b00da
-
Size
190KB
-
MD5
3e1ee35902e501553a21478b655b00da
-
SHA1
55feb9b69de2afa9d682c9b9b10fd8489a26e389
-
SHA256
c537e59c1bc8d06bba01bd30d10b5ac26dd4bbb3a3a8d78b271373e8a453bcbf
-
SHA512
9b3a982b9832e3cff7ad7679a62591a4c23d7d702002507f5d41300f88f3d325ca0150178913f635e765af87971b739052dd1e3f165bf24888cdf870df9019c7
-
SSDEEP
3072:u3mvqCDm+W03RB5eUp6UlD/mUKissApfA6y4YHFc/c:2mvqeP33AYFIN9treHeU
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e1ee35902e501553a21478b655b00da
Files
-
3e1ee35902e501553a21478b655b00da.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
HOUYDBBF Size: 128KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HOUYDBBF Size: 55KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE