Behavioral task
behavioral1
Sample
2295377edf4c8c8b74b0fb9810f9cae0N.exe
Resource
win7-20240704-en
General
-
Target
2295377edf4c8c8b74b0fb9810f9cae0N.exe
-
Size
191KB
-
MD5
2295377edf4c8c8b74b0fb9810f9cae0
-
SHA1
51027dcf647423ae96c54cdc2b56dfb09e57feb6
-
SHA256
4e479bce615d45a2309d5807e935d5099c225a0bef6c074af0a4c2020a756ba2
-
SHA512
d06b0cc9507019308c75892534860d7197bd3ffae72ce7e682a347b963a0e621c4ed3efd8c5f93712bb8cb5c3e0c883150520166fa6345136d82b47a7fb8033e
-
SSDEEP
3072:hKHdWl2gFxqx+RRLcCVDRAL8dNLZLk+q1rr54Ep3hU:hK9K2gLqsLLVDRkiNLZLklNmEpO
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2295377edf4c8c8b74b0fb9810f9cae0N.exe
Files
-
2295377edf4c8c8b74b0fb9810f9cae0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 185KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE