Behavioral task
behavioral1
Sample
2bb8fbbac1ae7e4e27f7dca5b8fa84004fe328225af6e8d8ba99bacef335c031.exe
Resource
win7-20240221-en
General
-
Target
2bb8fbbac1ae7e4e27f7dca5b8fa84004fe328225af6e8d8ba99bacef335c031
-
Size
205KB
-
MD5
80ed22eadaba65eb80bbe720a29c6599
-
SHA1
1b1bab6c87983eb6a8f9acbc3dad48d2f0f718ef
-
SHA256
2bb8fbbac1ae7e4e27f7dca5b8fa84004fe328225af6e8d8ba99bacef335c031
-
SHA512
74bbcd888da46d116e5d2fec48b5264df0e80100e959ae24183137116ce0153244c445fc8225b5027f77fb8ae55e97e2821c3e286cd0c7f0621d99061a68628e
-
SSDEEP
3072:DPijU4kcITkEnbBvByrEVoULptsdXfBo/DBJBGzkP5knJb:LijBkcITtnbBvnjLpSa/5k1
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb8fbbac1ae7e4e27f7dca5b8fa84004fe328225af6e8d8ba99bacef335c031
Files
-
2bb8fbbac1ae7e4e27f7dca5b8fa84004fe328225af6e8d8ba99bacef335c031.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
KASANOVA Size: 148KB - Virtual size: 156KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KASANOVA Size: 49KB - Virtual size: 52KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ