D:\PMS\pms4\Project(20131004)\GolfProject\bin\GolfProject.pdb
Behavioral task
behavioral1
Sample
d694e5e96aa67b6463e4ba8bc033f786a7a44133561f02cd5177d6acd7468668.exe
Resource
win7-20240215-en
General
-
Target
d694e5e96aa67b6463e4ba8bc033f786a7a44133561f02cd5177d6acd7468668
-
Size
462KB
-
MD5
4c8299a19fdc1387fd1c2e9735cd9bf4
-
SHA1
82b5ee78c16a2d8a7128a12ecfcf636b1c7c579d
-
SHA256
d694e5e96aa67b6463e4ba8bc033f786a7a44133561f02cd5177d6acd7468668
-
SHA512
6340354704c333d082578f2c0292127218561e5ca4f69ba400d413a2a2809c3f7d9cdf2f51cabd1afaec601abc565fc817faabb536180c7b3353438a3b2410e9
-
SSDEEP
6144:SKckh3oY803v/K1ov/AKl2ZpKIYmLBg9gNQUX25DJMGG8mnqYJhht/Uu9ri7bpu:ZhLx/2Kl2ZpKIYm1QgpX25DRmqirris
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d694e5e96aa67b6463e4ba8bc033f786a7a44133561f02cd5177d6acd7468668
Files
-
d694e5e96aa67b6463e4ba8bc033f786a7a44133561f02cd5177d6acd7468668.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 456KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE