urelas | NEAS[.]3f3f773e00615220e1ae83a920d99570[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3f3f773e00615220e1ae83a920d99570.exe
Size

168KB
MD5

3f3f773e00615220e1ae83a920d99570
SHA1

05ad21bbb8a4f774e38ec6779406532313030eea
SHA256

42588dd03f92e453413bfd4992239810fb216f644afc0962828b2cbd3748e7d6
SHA512

04d67e1af49bb63a02c2fddb7e5512de95759ab790945f7e9081ec36eb43360f9ea4a1add45b697fb1b58e70f498c89756f8c35da2ec700ca1dae892f7f6682f
SSDEEP

1536:C01+VO8LWbp4Zt/kvT2/AWbAoUETLKyUGDeF3eP8UVu065RG0/bpHwk5feKJ8:C019Tp4biALbUGc065Q0jpHwUO

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3f3f773e00615220e1ae83a920d99570.exe

Files

NEAS.3f3f773e00615220e1ae83a920d99570.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hkhdgrgf
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ