urelas | NEAS[.]5d6a2c89f59cbdc4d25fe6439bb071c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5d6a2c89f59cbdc4d25fe6439bb071c0.exe
Size

167KB
MD5

5d6a2c89f59cbdc4d25fe6439bb071c0
SHA1

c5e2b60b2600d46f501c8e1a05b7d0c324e3fc4a
SHA256

f2f6f456b5333b4103738e946e5c71b5368a142821276e82aae304d892a7d9fc
SHA512

e36db7a0b8405e3c392350d07bfabcaf878b774feb4d0a5b246fd7083b5039ceea926580d107ce1ca87701c0d1137d19caae977152a57e22908ef829c6ef8b31
SSDEEP

1536:eADO0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEEHpWYPyD:eADO0Wc7UJ6LZMaHLW65DE8pWMA

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5d6a2c89f59cbdc4d25fe6439bb071c0.exe

Files

NEAS.5d6a2c89f59cbdc4d25fe6439bb071c0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BUADSHID
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ