urelas | NEAS[.]e095fbf7ad317ad40ef43d2bf76c7fe0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e095fbf7ad317ad40ef43d2bf76c7fe0.exe
Size

156KB
MD5

e095fbf7ad317ad40ef43d2bf76c7fe0
SHA1

01a331b51a8dcdf24b402afee4c0b5ce66a7eace
SHA256

7e84f3e05f9fff4e99c1b0045e5e3308671064463e122449f3d26f6eb5e29545
SHA512

0a94edc36d06060d2ba8c1326e1170252b76475b2163d8451a55101bf20cd1607274cc4879824a1f15cd92cf0e6c4951335ef56f9e1f104bc999ece859d8b950
SSDEEP

1536:v9Hc/gSm2qkoy50cv7whqZ6yBvgj2qGqkOcws7sWjcdxd6FAaqJ+JS7gR:v9HigSYHSO2vgDFkMBP6F1qJ+JS7gR

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e095fbf7ad317ad40ef43d2bf76c7fe0.exe

Files

NEAS.e095fbf7ad317ad40ef43d2bf76c7fe0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GUTDSYTY
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ