Behavioral task
behavioral1
Sample
57073ab739a7fce3c7fd485366274fa0.exe
Resource
win7-20231129-en
General
-
Target
57073ab739a7fce3c7fd485366274fa0.bin
-
Size
307KB
-
MD5
57073ab739a7fce3c7fd485366274fa0
-
SHA1
836ed969af87088b844efbe389b62b15f624c146
-
SHA256
46be66b18bfe78bff61806442ac63a0db8e2ddd3543212f2c115f9b6a8d7da27
-
SHA512
f23e7e2fb7e332c89567995e1c84fa0c8d9563affd0377895d2e8ebb14716e398f2c602f8f80f7fda515867b28ac6c41c1b219b59b8a8506d85d02fe6b6957c2
-
SSDEEP
6144:yyKfEd7FQGSmAWRViVxGwl+fQSVY/Z+I2VLfFL4X3WsuF9B:yo7CGWcQSyYI2VrFfH5
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 57073ab739a7fce3c7fd485366274fa0.bin
Files
-
57073ab739a7fce3c7fd485366274fa0.bin.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 301KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE