urelas | NEAS[.]a4d44dd76d2d54c5a84db95897907ca0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a4d44dd76d2d54c5a84db95897907ca0.exe
Size

169KB
MD5

a4d44dd76d2d54c5a84db95897907ca0
SHA1

709b1f3bd16575505d660599c3952c4ae2471e34
SHA256

54e6a39d3ee16debb94727cbb0325cc6fa5a2131da57407d11b7e8331908d5c6
SHA512

425b25ebce65b50de2a50ac1af4dc4e9ee3cc1319ec2d1db042887e73dc1b75efb4d51bc60bdaa5e58d52e61b8f8e6b094bedba62d40053368b2df7d5d2cd080
SSDEEP

1536:SRHjpKZg6X2npEjE2l31j2/H2r34fugIL1uoziiIGIW8x3uvMnX565ewsp9Mkd:SRDpKD2npEcWILILEo/IGI7p65eJpnd

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a4d44dd76d2d54c5a84db95897907ca0.exe

Files

NEAS.a4d44dd76d2d54c5a84db95897907ca0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ