urelas | NEAS[.]54076958141fd4d4c7e2c7962654a460[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.54076958141fd4d4c7e2c7962654a460.exe
Size

169KB
MD5

54076958141fd4d4c7e2c7962654a460
SHA1

2c5ecd899c9b36bbebe3781356ffeef13cd94995
SHA256

8f47cb3ab07607e38afa3cb7a1a0f8835902265329875c1fc39ab74ed92981b4
SHA512

fc2e2c062d0b70bfe1642617395a68936df6a4966c14f971f68ae1c460c1f90460f864b173ece1968b30f65dcc242447aa8d2b5c8f3f28033cfa3625dc614e36
SSDEEP

1536:Q0a1VO8LWbp4Zt/kvT2/AWbAoUETLKyUGDeF3eP8UVu065RG0fl5fM2QPo:Q0auTp4biALbUGc065Q0fY7Q

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.54076958141fd4d4c7e2c7962654a460.exe

Files

NEAS.54076958141fd4d4c7e2c7962654a460.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VDSVHDHD
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE