Behavioral task
behavioral1
Sample
e52252e39f5decd467ee26ca0866fb0c4c36f64a92e2ee6dc2805d1b42d7e538.exe
Resource
win7-20240708-en
General
-
Target
e52252e39f5decd467ee26ca0866fb0c4c36f64a92e2ee6dc2805d1b42d7e538
-
Size
216KB
-
MD5
28a115f1ccd64ad84874f79744b88c86
-
SHA1
8c40947c66b5a66c940247847fcc79aacfb1cb6e
-
SHA256
e52252e39f5decd467ee26ca0866fb0c4c36f64a92e2ee6dc2805d1b42d7e538
-
SHA512
5adfeb33cb5a5d8b57f65af20ac28c60c23196584a5bb6fa04910bea1795e7c0f3fc09e67b0a47f4da265b29b1ab2d392b141d793692e3e71d512d457066f0ae
-
SSDEEP
3072:tAtvqCDm+W03RB5eUp6UlQ/mUjyfPfGknARyd4Ycex3YvQd2c:2tvqeP33AYFXoiPfGkAoJc8Qc
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e52252e39f5decd467ee26ca0866fb0c4c36f64a92e2ee6dc2805d1b42d7e538
Files
-
e52252e39f5decd467ee26ca0866fb0c4c36f64a92e2ee6dc2805d1b42d7e538.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
HOUYDBBF Size: 128KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HOUYDBBF Size: 55KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE