urelas | NEAS[.]f625c456ac933dd00049551afe4cf1bbexe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f625c456ac933dd00049551afe4cf1bbexe_JC.exe
Size

484KB
MD5

f625c456ac933dd00049551afe4cf1bb
SHA1

9ef40a31fc96c84f41437742cc0781d4a3728aae
SHA256

8783bd58558e3ff7cd554dd0dc394a9365ace12634749835befec968647a6e94
SHA512

2d7dfe6ea7327b5009e1183430551bcc8d24196cae4a0e48e22fc275ddc6d4f6128ff7415d0cbd876674ab7e16f631c08f2f18638133a47e17803c5067282930
SSDEEP

12288:Vpbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbeB:VpbXi5xzFUBaazsiofx8A

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f625c456ac933dd00049551afe4cf1bbexe_JC.exe

Files

NEAS.f625c456ac933dd00049551afe4cf1bbexe_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 245KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ESER
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE