urelas | NEAS[.]fffe9a93a9ab771a86c5105fb3616f00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fffe9a93a9ab771a86c5105fb3616f00.exe
Size

385KB
MD5

fffe9a93a9ab771a86c5105fb3616f00
SHA1

ec05dc27cba27ff1b4dfe93aac2683c6053a591d
SHA256

cf48a278c5307a4718a8f37e179e267b2ea33f134d61f93f6d4295a466cf9a4f
SHA512

ef7cd93db81309f1f2fdecbff9fb9568a116bee5572d9b4dd8398b714721427dbc4067758ac3e2aa7e59353ca31523cc1e9dae0b70db7346a1be63812dc4662a
SSDEEP

6144:2xBWeMRygxDLbHxlSBxzJMotBB6q1gBFJV6AvRqsf6YU+FM+3Yn/fCXjQGtp1B:G3MQIDKJQq+Xxvo0U+d3s/fCX0K

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fffe9a93a9ab771a86c5105fb3616f00.exe

Files

NEAS.fffe9a93a9ab771a86c5105fb3616f00.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ