urelas | NEAS[.]b25a9a3fb1215250db8ba1a35fd4e9c0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b25a9a3fb1215250db8ba1a35fd4e9c0_JC.exe
Size

484KB
MD5

b25a9a3fb1215250db8ba1a35fd4e9c0
SHA1

577d695d5ae704e5681e4645ccb4bd11b76be248
SHA256

88ee18c4e09cfe39a2430704b0f088b7402311e049c4a53f1e47657d6803e067
SHA512

acee3b80cc6b74354dad146cea95b8091f971de6a8d1ee2adbd8654848578a596a9fe87966a5826d028c1367de94aa6a0859665f17424fba7a3c67ae099578a8
SSDEEP

12288:Vpbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTben:VpbXi5xzFUBaazsiofx8m

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b25a9a3fb1215250db8ba1a35fd4e9c0_JC.exe

Files

NEAS.b25a9a3fb1215250db8ba1a35fd4e9c0_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 245KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ESER
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE