urelas | NEAS[.]b23987cc5be8bbbae158347388819cc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b23987cc5be8bbbae158347388819cc0.exe
Size

244KB
MD5

b23987cc5be8bbbae158347388819cc0
SHA1

071e733c1445a1fab0819707b514c55fa5c72b63
SHA256

ee053f5496f627f712a5ebb33982cfbfcb7a1fb73c64e84fc28196c42f171283
SHA512

1c9a3ff8da89929ef066bd5d6986afed90472c15b7b199a682968f2efae781060cf42cba702a022358d5e13366e5e54c842cadb330a672a2936c4b3a4794276d
SSDEEP

3072:4+XH9nwEYIAyIkLmlrFm654Up5AWuQeX7IGCsXfi6ZEVjfZn:4+GEYIAPkLwc/UpuWL+7y6fibn

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b23987cc5be8bbbae158347388819cc0.exe

Files

NEAS.b23987cc5be8bbbae158347388819cc0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ