urelas | NEAS[.]d0ecc91dbc6e59ba45134f5b330bdfed[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d0ecc91dbc6e59ba45134f5b330bdfed.exe
Size

167KB
MD5

d0ecc91dbc6e59ba45134f5b330bdfed
SHA1

da67f68a9d9d7563a6cee79d0802fa96bffecf36
SHA256

b6969a118afd68f4b5e4e15462399cd929c21eab63b0e331ccd061e7fe313192
SHA512

15fb43622aaea061afc2e93c467c2342ebd2df6dcafde1bf3c39c68cacff33e32b1b1d5c5da4fed10bee64e7a0d5f90d1825785b5d39a499bf63860bc0591319
SSDEEP

1536:abRaQSPc3vjvdRiHhhU1Kn1LtMQr54xzId4uP7dsaTdpU+gyxmOokYpD84dg:iNN3vhRiDaEd4uPpsaBrxRokYpD8t

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d0ecc91dbc6e59ba45134f5b330bdfed.exe

Files

NEAS.d0ecc91dbc6e59ba45134f5b330bdfed.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HYSDHSD
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE