urelas | NEAS[.]fc2e2d70fc90dac1867692808ad06250[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fc2e2d70fc90dac1867692808ad06250.exe
Size

520KB
MD5

fc2e2d70fc90dac1867692808ad06250
SHA1

0c29b2666dcaca1fd25dc6d70a40e676979eedd2
SHA256

54d63fb3a2d7225eb89dbdf787785cfc23cf423caed885544ea67f708414c32c
SHA512

1edf8159b7e29cea40af1a75ef3c5c95ca5bc571fbe3602f447aff3aff15d4ce97e46888ff3d496ef0d2e35018656ad96e7b667190cbba8cc223e3a87eef0c5f
SSDEEP

12288:B2vCS/TXIIgYpPWlTIU/b37dJ75WEe+eKTxB6m:BCYI3AlTv/b35tecFB6

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fc2e2d70fc90dac1867692808ad06250.exe

Files

NEAS.fc2e2d70fc90dac1867692808ad06250.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 158KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

AHNLAB
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE