urelas | NEAS[.]NEASb6a7d85fdef30ef5611a1585657b9524exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.NEASb6a7d85fdef30ef5611a1585657b9524exe_JC.exe
Size

263KB
MD5

b6a7d85fdef30ef5611a1585657b9524
SHA1

d9b34f7a8052ac8be9b80f5544edb86bc352b861
SHA256

26b973b6d6cdba6c7c2e9e872585cc3b2a9c566e1101e45532cda7c3f3382a1a
SHA512

2d7749d10320c1f89f3f13281f626c21b167197efd72c857a70a7f1da86ffd97ffda061580c1acbf949c69f0f20a9276e27421410fc8c98df1f0797b6cbdad5b
SSDEEP

6144:B5ibQcmlVD+BgotLvTtehd1wLIE92FJ1wZyZUBiTL:BUq+BgotLvTtehd1wd92FJ1HL

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.NEASb6a7d85fdef30ef5611a1585657b9524exe_JC.exe

Files

NEAS.NEASb6a7d85fdef30ef5611a1585657b9524exe_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VSDHGWHD
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ