Behavioral task
behavioral1
Sample
f7b6dfeb0dcd305b2ad1f3c2e03295125f01cccb9b3a27bfbacb0c3a9bfd09af.exe
Resource
win7-20240215-en
General
-
Target
f7b6dfeb0dcd305b2ad1f3c2e03295125f01cccb9b3a27bfbacb0c3a9bfd09af
-
Size
1.1MB
-
MD5
7c6461f475f688fd0115e6ed0b8e4e80
-
SHA1
475a3f9cb1543ea3b9bfec7bd3fbcc70c573ac7f
-
SHA256
f7b6dfeb0dcd305b2ad1f3c2e03295125f01cccb9b3a27bfbacb0c3a9bfd09af
-
SHA512
515de86f33e9f78bae1a65402686ed0683818b0d64828825d8f24b93946fcbfb671f955e766518e142c73b93b3fb7950ccc242664ba09fcc918759869a624fb3
-
SSDEEP
12288:PerebTpYN2jF7vQZmSohg+k7j6aDG4FuA6lpgTIJcqBZ5v0:Pm+TpY5852j6aJGl5cqBD0
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7b6dfeb0dcd305b2ad1f3c2e03295125f01cccb9b3a27bfbacb0c3a9bfd09af
Files
-
f7b6dfeb0dcd305b2ad1f3c2e03295125f01cccb9b3a27bfbacb0c3a9bfd09af.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 656KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 504KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htext Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE