Behavioral task
behavioral1
Sample
55b2f589b5fb1bf2bc1c338983c2c389c13f9d97e60c11b41cbf6c782a21c8bf.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
55b2f589b5fb1bf2bc1c338983c2c389c13f9d97e60c11b41cbf6c782a21c8bf.exe
Resource
win10v2004-20240508-en
General
-
Target
55b2f589b5fb1bf2bc1c338983c2c389c13f9d97e60c11b41cbf6c782a21c8bf
-
Size
252KB
-
MD5
1723b0867734d2d88615493de7ea1870
-
SHA1
0dde3a1e3868015b3da5f0ec3f402e0462a579c6
-
SHA256
55b2f589b5fb1bf2bc1c338983c2c389c13f9d97e60c11b41cbf6c782a21c8bf
-
SHA512
c9fc8bb3ddda21126063fc63e8b2e7188dd42488b0a07387dab40173564de4a8127fa1952747a51df3c9235240d180fef488fb82f14cb452961348f454adb3e3
-
SSDEEP
6144:f09g16vl/rOlA2//whEp0Gd1EL0F921aZyhLp9:J2Ol1//whEp0Gd1E8921U6
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55b2f589b5fb1bf2bc1c338983c2c389c13f9d97e60c11b41cbf6c782a21c8bf
Files
-
55b2f589b5fb1bf2bc1c338983c2c389c13f9d97e60c11b41cbf6c782a21c8bf.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ