urelas | NEAS[.]d9c55ecd10a8d6b36505fe347c533d40_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d9c55ecd10a8d6b36505fe347c533d40_JC.exe
Size

484KB
MD5

d9c55ecd10a8d6b36505fe347c533d40
SHA1

d4153d51049db4116d323c8d323cf167a4c6b533
SHA256

78072f285213f435353bdb32eb1512bf05532874d34e85c796350ea8fe9b7326
SHA512

7019145f4c64d3680ad923ac434ead9287754ce6dde8858a3ca16daae167493128c685c1241940847a498fe4df805eb6784e7233e06d8cc9bd6a1d97288bc081
SSDEEP

12288:Vpbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbe5:VpbXi5xzFUBaazsiofx8U

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d9c55ecd10a8d6b36505fe347c533d40_JC.exe

Files

NEAS.d9c55ecd10a8d6b36505fe347c533d40_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 245KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ESER
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE