urelas | NEAS[.]9416292416075046682f570477bc0b20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9416292416075046682f570477bc0b20.exe
Size

263KB
MD5

9416292416075046682f570477bc0b20
SHA1

ce40529e7a99ec459054709ef20ba3a514c419e8
SHA256

c9a51569a23fb4f7a37e22412b0cc020ac75261cc2c14b0664285bfb869d13a1
SHA512

4863968888461897bd3740a036375d2dbbb4921307bba42e452d432e60ed1fd0b228f843967cde487210febb57825c4f02c813d7799102fb4408a6176f1922e5
SSDEEP

3072:0G7ZveDrZ5pzqO5kDEjUrqfZZY577T9LngvBe/GJI9E5UJm0H:04e33pzqO56QUufZK577hLn6eF9Jm0H

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9416292416075046682f570477bc0b20.exe

Files

NEAS.9416292416075046682f570477bc0b20.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 140KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xxvdfgdg
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ