urelas | NEAS[.]cf612f4e70c31bd31dd40728d9d24f60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cf612f4e70c31bd31dd40728d9d24f60.exe
Size

169KB
MD5

cf612f4e70c31bd31dd40728d9d24f60
SHA1

a0a02a41666961ad09cff064a070f8488e269eb3
SHA256

869ab3b907df3fe874d702bab196dfbf64323fa01f3e23e8a82623aead83e225
SHA512

249b2ad912ea9b2232e4ea4ef8dac0a66b321b24d7adae4e4ce0027b5ee06242b98cb54b5ca11fd1ef1194d55d2c05cbdb06ee961411b5a4dd7078b069aa1ab3
SSDEEP

1536:Q0a1VO8LWbp4Zt/kvT2/AWbAoUETLKyUGDeF3eP8UVu065RG0fl5fM2QPf:Q0auTp4biALbUGc065Q0fY73

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cf612f4e70c31bd31dd40728d9d24f60.exe

Files

NEAS.cf612f4e70c31bd31dd40728d9d24f60.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VDSVHDHD
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE