urelas | NEAS[.]61bcdecb8b0f077763af79fd1fd85eb0_JC[.]exe | Triage

Sharing

General

Target

NEAS.61bcdecb8b0f077763af79fd1fd85eb0_JC.exe
Size

166KB
MD5

61bcdecb8b0f077763af79fd1fd85eb0
SHA1

99cae9923e3abcf9a14d711fed36c85effd59301
SHA256

9101d1071be9e7276068c9fd932a10fd200aba6189676bd5483ef2302c772894
SHA512

a9cd912c3d913770900c3cec08e3800f3893cca3f9684d9fc5af5a0ab6bf1884172491af8b45ef25350c4d35c0facdd4ffc657e6a054cfd3390f82e578849167
SSDEEP

1536:4INb5b8WoWwACLU2/dpWbHo7dVLoUaFKcq3ePuHCg65dCo74mTrm:4ITb8WgdcknLo5Fhg65woFi

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.61bcdecb8b0f077763af79fd1fd85eb0_JC.exe

Files

NEAS.61bcdecb8b0f077763af79fd1fd85eb0_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VJHSGDHI
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE