urelas | NEAS[.]ddb8740b0ceac63d497f483d41db7bf0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ddb8740b0ceac63d497f483d41db7bf0.exe
Size

167KB
MD5

ddb8740b0ceac63d497f483d41db7bf0
SHA1

66e5444aa7e8816d38b35bdf59f32de1bee09e28
SHA256

ffd41cf2308dc133499eaeb5253d60ab33cbd128f39cdd243c417e6fc878dc6d
SHA512

5c28c21b12e402e088bff8b11337e21ba3806f3cdf82fcda884f77001cb0dd72a2573aaf06a296b9c35c31e8da67e248caaaf554b12d46e307d3070a1af315d0
SSDEEP

1536:eADO0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEEHpWYPyjn:eADO0Wc7UJ6LZMaHLW65DE8pWMm

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ddb8740b0ceac63d497f483d41db7bf0.exe

Files

NEAS.ddb8740b0ceac63d497f483d41db7bf0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BUADSHID
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ