Behavioral task
behavioral1
Sample
8e4a75514508bacb12b6112e05b290e126dd4684b684287c520b1b4db84be178.exe
Resource
win7-20240419-en
General
-
Target
8e4a75514508bacb12b6112e05b290e126dd4684b684287c520b1b4db84be178
-
Size
641KB
-
MD5
ec58efea479ea0c4f00a8a224d8447aa
-
SHA1
d9487e1088909f7f45fd286ef6abadf3ee0efbfc
-
SHA256
8e4a75514508bacb12b6112e05b290e126dd4684b684287c520b1b4db84be178
-
SHA512
3aa1ee2052095bfeb5c3df436de8208f101565a9e75258e13f320263ed0b235102ab9a551c71a096490ce5272438c2f17b117781099ab30b479496b1df21d370
-
SSDEEP
6144:QKbwhAxdADVGdLtEr3xS7LyCRrtSY0b6n++Ps7UfIgDBGUIppvJ:jAAxdWV4kxSHyCtSY0bl+HGU6J
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e4a75514508bacb12b6112e05b290e126dd4684b684287c520b1b4db84be178
Files
-
8e4a75514508bacb12b6112e05b290e126dd4684b684287c520b1b4db84be178.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 231KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE