urelas | NEAS[.]3251efe47be9588ee1a040292ed95550[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3251efe47be9588ee1a040292ed95550.exe
Size

512KB
MD5

3251efe47be9588ee1a040292ed95550
SHA1

a93670b81b9bd6a2bf8eaf230e666836beb73e08
SHA256

6cf701f7578e18be29fd195eaac8523f8a48a025d10e857abc6d134cdd3bfb6e
SHA512

25ab16f4c59a58a01fdebcfa45d9a292a9472e8d5d953345356ffa989ee1fe3ed66c92fcf1689436e61dc13b9118fd8e4b2bd56ba7585a7d776a1ea238ff60df
SSDEEP

12288:fLydAA9NZZdzawa+rwj6RLN8bsq5xP/KEHi:fmH1aw1M+cZ4ki

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3251efe47be9588ee1a040292ed95550.exe

Files

NEAS.3251efe47be9588ee1a040292ed95550.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 78KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HOHOHOH
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE