Behavioral task
behavioral1
Sample
153e550b4e3accaac38b438c854db5c5.exe
Resource
win7-20240221-en
General
-
Target
153e550b4e3accaac38b438c854db5c5
-
Size
202KB
-
MD5
153e550b4e3accaac38b438c854db5c5
-
SHA1
d18304ee533cc28b0da540ae48ed265ba9d4bfb0
-
SHA256
333b9a4d2648676ac3fa378f1bb9ea7d6db5ae81bfe166861e01423e5b32dc29
-
SHA512
dbedb973499e1e9d34fd5fe8594e82910ec0883cc38c505eb817fe2172d4b1df7a6b4ab115484e0c716208aee25a691104f99bd30d0cdd0e4b0fbaef6b4fa1db
-
SSDEEP
3072:llfTVlvfdEDRmyc+XA60Kj4omjuVZ6rNp0VV:lpTV9rZllomjuCNp0v
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 153e550b4e3accaac38b438c854db5c5
Files
-
153e550b4e3accaac38b438c854db5c5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
HHSUHUDH Size: 128KB - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HHSUHUDH Size: 60KB - Virtual size: 64KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ