urelas | NEAS[.]dcedc36b439b56143704ec858e8d815a_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dcedc36b439b56143704ec858e8d815a_JC.exe
Size

365KB
MD5

dcedc36b439b56143704ec858e8d815a
SHA1

d04d0070c7160dff02ea63f23914e9b13f3524e0
SHA256

9ea8f93fab34a4f446cdbe68bd8f380bf5c16c161eac0d66e0b406c9378b2a13
SHA512

fc23d72b5869f5d4915cdeaf096549b1ddecd3fa42bb64a09cc1fc476a006318f4c5e8ce14d244fa30e0bdde512ab186bbbc6fe9cac780f3142593bc255648d6
SSDEEP

6144:CuJkl8DV12C28tLN2/FkCOfHVm0fMaHftvCGCBhDOHjTPmXHk62pc:CzGL2C2aZ2/F1WHHUaveOHjTA

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dcedc36b439b56143704ec858e8d815a_JC.exe

Files

NEAS.dcedc36b439b56143704ec858e8d815a_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ