Behavioral task
behavioral1
Sample
797863e7e81c2300c16865f8f8d3c62867df75e65a8cb648d862aa7a8b9d4b63.exe
Resource
win7-20241010-en
General
-
Target
797863e7e81c2300c16865f8f8d3c62867df75e65a8cb648d862aa7a8b9d4b63.exe
-
Size
193KB
-
MD5
61680c917c1a19dac1b096853c2bcc5a
-
SHA1
16d8f43406c910483c0a4e1ea5327e0aa34058fc
-
SHA256
797863e7e81c2300c16865f8f8d3c62867df75e65a8cb648d862aa7a8b9d4b63
-
SHA512
fea54941f01c4391d6c307719f7c84fcead30a33f8ac3cc407d041969cb464ae58d6c86a1c9e5eabaa471f3d6b5fcc52be3b4d162bc63bb5f54d191a90273f07
-
SSDEEP
3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhA:gExhk7rh7NEOIYWlPM6r6A
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 797863e7e81c2300c16865f8f8d3c62867df75e65a8cb648d862aa7a8b9d4b63.exe
Files
-
797863e7e81c2300c16865f8f8d3c62867df75e65a8cb648d862aa7a8b9d4b63.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
GYSGDTTE Size: 137KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GYSGDTTE Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE