urelas | NEAS[.]7f9fe16a04b6e7e2598f5df215f7a4e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7f9fe16a04b6e7e2598f5df215f7a4e0.exe
Size

308KB
MD5

7f9fe16a04b6e7e2598f5df215f7a4e0
SHA1

1039f8c84520f8f3b2774bc5069d26105c1c0fa4
SHA256

59aba6e09d9b734c15952f7e7375e48e3ec251eb6ef0b420082e931c9cfbcc3d
SHA512

449762ed56623605b9076b0929d7ae819effdfc134161884b2ff753bf7842d70c70fa9687d249071f42af2bfcf3755f523e5b39283ec5d4677f7206226f5eb09
SSDEEP

6144:gdZMr6y/5UTI/6tLW4ughRLzHQUmrSfbpaiTsa/:gL7TI/6tLW4ughRXPmrKj

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7f9fe16a04b6e7e2598f5df215f7a4e0.exe

Files

NEAS.7f9fe16a04b6e7e2598f5df215f7a4e0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ