urelas | NEAS[.]a3acb66635be3f51b298c7a129c73c90_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a3acb66635be3f51b298c7a129c73c90_JC.exe
Size

168KB
MD5

a3acb66635be3f51b298c7a129c73c90
SHA1

aaac33268094fdb4bd280bbac232de9e9e213519
SHA256

6f7c67a36066e46b0f6e91af268c66dd898cdd9339b20743972219b9008228b7
SHA512

cd714bed616f41e5d244914bf1aa38660603ae1e37d5978c55a5716480296ebe15327f6bd2fdfb4bfdcd19e4cb7f98f3132a75f00bb553696d95b921f350bc86
SSDEEP

1536:C01+VO8LWbp4Zt/kvT2/AWbAoUETLKyUGDeF3eP8UVu065RG0/bpHwk5feKb2:C019Tp4biALbUGc065Q0jpHwUb2

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a3acb66635be3f51b298c7a129c73c90_JC.exe

Files

NEAS.a3acb66635be3f51b298c7a129c73c90_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hkhdgrgf
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ