urelas | NEAS[.]f2749b841b30db82ef4074075478a1f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f2749b841b30db82ef4074075478a1f0.exe
Size

192KB
MD5

f2749b841b30db82ef4074075478a1f0
SHA1

b82092d536ae689cf35af9053c0e712a459a2b96
SHA256

655ecaff8aa89c41fbcebd688f0f7a111edd2dc79505829e51ef319e80b4f3aa
SHA512

c502beea102461cd1c0c42927e4a73c6bb2c279f2911e3dbd0f31e6c7c4277ca53abb15b67dbfc788b3c6e5556c6f9c0d10c947d9dfb39cd023ab2840da7f494
SSDEEP

1536:48dWsOWDgAMpplGwLO2/0okNPVxIKLyiYh4Sn3Dv73k64965Ej9U5fyR:48rQpfpcOKLyxh9N4965E9h

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f2749b841b30db82ef4074075478a1f0.exe

Files

NEAS.f2749b841b30db82ef4074075478a1f0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HSHHDHSU
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE