urelas | NEAS[.]5541dc55e6070deac6aae2869ecf08c0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5541dc55e6070deac6aae2869ecf08c0_JC.exe
Size

484KB
MD5

5541dc55e6070deac6aae2869ecf08c0
SHA1

9228bb2b75cf0af0061c4bf08bf43d90a34f75f0
SHA256

185272bc79078cb47f4fff00c9b0ecd6d4467ab1c9e23d627fb90be225a16b0b
SHA512

ce2b747dc7892a70a7d19cf4ff556a87125090678f8fb4da7c387f2f06279b203944dd6d0ff44f56737e330d1f0cd0be58a5365cadd307b49d3e2f3d4c1e9005
SSDEEP

12288:Vpbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbe6:VpbXi5xzFUBaazsiofx83

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5541dc55e6070deac6aae2869ecf08c0_JC.exe

Files

NEAS.5541dc55e6070deac6aae2869ecf08c0_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 245KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ESER
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE