Behavioral task
behavioral1
Sample
eb9fa87ab318dd7da28357699cc94171df27858bc40b44f8a082d069fd98cf08.exe
Resource
win7-20240221-en
General
-
Target
eb9fa87ab318dd7da28357699cc94171df27858bc40b44f8a082d069fd98cf08
-
Size
234KB
-
MD5
eb138f28d477cc160e9f06a74e478221
-
SHA1
54813bf59bcfde386df97d44cfa70c01a9e747de
-
SHA256
eb9fa87ab318dd7da28357699cc94171df27858bc40b44f8a082d069fd98cf08
-
SHA512
ea44ead8d6b6fad056e82d567b17aa33f0415a88aa72bd7a1f5a7e75b308954f28497bae7dd38990e0856991378e16259e0cb2af055d1946173b969c8234192e
-
SSDEEP
3072:eYshWbz+6LPr5Qy7K65UCypO9Ro2rqYyXzCEwGK:eYQWbS6LPeHCypO9RleYuzCEwGK
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb9fa87ab318dd7da28357699cc94171df27858bc40b44f8a082d069fd98cf08
Files
-
eb9fa87ab318dd7da28357699cc94171df27858bc40b44f8a082d069fd98cf08.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
SVDUWDGW Size: 155KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SVDUWDGW Size: 75KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE