Behavioral task
behavioral1
Sample
31ce7cf797275cbf41b93cb653b42eaacc996d18819014821075c5254a24661d.exe
Resource
win7-20240215-en
General
-
Target
31ce7cf797275cbf41b93cb653b42eaacc996d18819014821075c5254a24661d
-
Size
193KB
-
MD5
0b9ced73c05af3db737bffef222d3e1f
-
SHA1
5d60952ec26caa5b695182f42c5c5667a54ef150
-
SHA256
31ce7cf797275cbf41b93cb653b42eaacc996d18819014821075c5254a24661d
-
SHA512
6188782b5d8b783b8ac0e7293c9f01d3e44aa08fb6f5639192c8850c5bf5f17e4c5590816a141887e39543f6c397f59191e8f3706412edb441fb5d3831b42f29
-
SSDEEP
3072:mqp2cKm5DI/OQf6B6E8wervMLN78FWY6uGKq0FA1uf:m8la5aF4jMLh85Ag
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31ce7cf797275cbf41b93cb653b42eaacc996d18819014821075c5254a24661d
Files
-
31ce7cf797275cbf41b93cb653b42eaacc996d18819014821075c5254a24661d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
BHSHDGGW Size: 133KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BHSHDGGW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE