urelas | NEAS[.]dcedfead0439b2dec2c5d7902d19b7e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dcedfead0439b2dec2c5d7902d19b7e0.exe
Size

366KB
MD5

dcedfead0439b2dec2c5d7902d19b7e0
SHA1

d21e3eeb752b8f2e38d45df298016cb2f28a52f7
SHA256

93867cf25cbd194aaeb389c461b74c411c3897758fe121a87753e7ed94c11d25
SHA512

f706d4130914794c26f95e44b859773839798cac1b1cbaa28b1d89ea463a7cf7d7164f1394101fe44050724954012fbf1c2e7a80c5543927c551c2a0f7ffbfc8
SSDEEP

6144:CuJkl8DV12C28tLN2/FkCOfHVm0fMaHftvCGCBhDOHjTPmXHk62pY:CzGL2C2aZ2/F1WHHUaveOHjTM

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dcedfead0439b2dec2c5d7902d19b7e0.exe

Files

NEAS.dcedfead0439b2dec2c5d7902d19b7e0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ