urelas | NEAS[.]5ca4c0287137cc3120ea4ea58ce3f240[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5ca4c0287137cc3120ea4ea58ce3f240.exe
Size

155KB
MD5

5ca4c0287137cc3120ea4ea58ce3f240
SHA1

445da2e730013fb79b9b76a3a549c0c3ba82061e
SHA256

9679f8413e007382cc2092446a8f041a9c1e299ba2ffd3f592d58f476a002e13
SHA512

5577982bdd036c0b04fdbe0a583d0e6bb7b360c8abbba8e327721a4bd7d022ee97f0a90b37ec29d0618ff3f88d1aabdd3e859be8ae0d906bf19ad7ee4252d969
SSDEEP

1536:8iVlUPlfHeARjOsOAe2zBN7lE4U1sgzAom8JsuPIclSXsWjcdd6YGJYwYH:nVlUPZRxfxE9Vs5cfdd6YGGL

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ca4c0287137cc3120ea4ea58ce3f240.exe

Files

NEAS.5ca4c0287137cc3120ea4ea58ce3f240.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ