Behavioral task
behavioral1
Sample
b63c8b8957eb0d68747833917a524379ceb72d10cf98716e30d68116a3e3d9fa.exe
Resource
win7-20240708-en
General
-
Target
9c86da827b68fac03a78f796953d6700.zip
-
Size
572KB
-
MD5
0266bbd81ff7643db8719b9273035185
-
SHA1
b9db1af74ce5620b12952c16e99ad2c878466691
-
SHA256
7a182c507339d867cf77ff110eac7c793433ea53051e870d3f0c1699a11412dc
-
SHA512
f862f14cb23ef84887f74716fc4d62d1b3277a8be509e862d9cbb43ee6bf34f67f311f6f96f91d5ebfec84362d47849fddd02d9c0b63707c6456df74a663707a
-
SSDEEP
12288:esazQvEqdLE876AtPVPz8VGd66AmbdTjsKE6xg/1G6d:GMvE0D76ANQGdZfTDxc9
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b63c8b8957eb0d68747833917a524379ceb72d10cf98716e30d68116a3e3d9fa
Files
-
9c86da827b68fac03a78f796953d6700.zip.zip
Password: infected
-
b63c8b8957eb0d68747833917a524379ceb72d10cf98716e30d68116a3e3d9fa.exe windows:5 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
IOKGDTTY Size: 464KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IOKGDTTY Size: 310KB - Virtual size: 312KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE