urelas | NEAS[.]334ce320acc7fa8ba1ea15ae891ffd40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.334ce320acc7fa8ba1ea15ae891ffd40.exe
Size

479KB
MD5

334ce320acc7fa8ba1ea15ae891ffd40
SHA1

789baee2ca5b2fb1cd5cfb0e8a13a20b067a542d
SHA256

feb04ce116814de544c286cedad02f5037cd2925fa84c12318a527ed4e0efc99
SHA512

2e4ff0e232efe88d67f3b52481f6ca6b4e6466f93a52c38b1bae252e8f9ff0a03ce9b45b8af4b83e2f4b13a4639bfd820318eae64a037e88e6ef6f53a368c526
SSDEEP

12288:k2PxDgZo3ijniea8Xih9abyNK95ZA9u3y2XWbe:k2SLi7oih9abvce5

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.334ce320acc7fa8ba1ea15ae891ffd40.exe

Files

NEAS.334ce320acc7fa8ba1ea15ae891ffd40.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ