urelas | NEAS[.]5a049b9e951ab1cb7cc3c586f18d1be0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5a049b9e951ab1cb7cc3c586f18d1be0.exe
Size

308KB
MD5

5a049b9e951ab1cb7cc3c586f18d1be0
SHA1

e64311df940889606e078495b626281020a1ae6b
SHA256

1f131b63f785baa22c07ec71c9aad66ce330c9db0e9789726f0bdec5d6142c87
SHA512

59f64b2d97cdacb2372cecc017e6e322e054d16fe84d1cc46ac0818c32f9f7ea177094435a1ef5f7ea537ee7e92c030adcf785caad394c169e0ae3d81a487fc4
SSDEEP

6144:ndkkEzAEWdF3qKolL73Z2R8LEzLhaGzTiTU:ndc6qKolL73Z2R8+VW

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5a049b9e951ab1cb7cc3c586f18d1be0.exe

Files

NEAS.5a049b9e951ab1cb7cc3c586f18d1be0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 69KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VSDHGWHD
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE