urelas | NEAS[.]9df1913442bf3ef11ffc2f4b5d4cf670[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9df1913442bf3ef11ffc2f4b5d4cf670.exe
Size

261KB
MD5

9df1913442bf3ef11ffc2f4b5d4cf670
SHA1

b84966c512f1b86cf378e251bef8303fb94b3b0d
SHA256

1e031fb08030821fd7fd203f01e41428fb7efd48fd0422f08965302e4f75cafd
SHA512

4494b928872e179e92ef98a87cde6bd07d396de5144e5f872b60fad6ab70a888a98c65fd9f783548b81693367b6de8079d034dcc4c78d6d00b0f4235641d0ad8
SSDEEP

3072:0G7ZveDrZ5pzqO5kDEjUrqfZZY577T9LngvBe/GJI9E5UJmxD:04e33pzqO56QUufZK577hLn6eF9JmxD

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9df1913442bf3ef11ffc2f4b5d4cf670.exe

Files

NEAS.9df1913442bf3ef11ffc2f4b5d4cf670.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 140KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xxvdfgdg
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ