urelas | NEAS[.]97130b4a86e5bf8ef0f2ff16cdb33df0[.]exe | Triage

Sharing

General

Target

NEAS.97130b4a86e5bf8ef0f2ff16cdb33df0.exe
Size

482KB
MD5

97130b4a86e5bf8ef0f2ff16cdb33df0
SHA1

6bfc46c14ad3a57e4b7cd937e5eb2e134107ea5a
SHA256

c6f7fca4e02d13461333cd810f9a9965f9fb381dbd19d0a0f2a425ba8d315b29
SHA512

0ef0b6186b3333c5db5d7653f4282132f7fbd0af23f8192b0fec3ce0560e0c2d713196e12353ea6fdf5c4e66fbb0d946785228509cb41744a8eec477f0e3642e
SSDEEP

12288:2pbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbcH:2pbXi5xzFUBaazsiofx8E

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.97130b4a86e5bf8ef0f2ff16cdb33df0.exe

Files

NEAS.97130b4a86e5bf8ef0f2ff16cdb33df0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 245KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ESER
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ