urelas | NEAS[.]a7daf62b7cf555e8f089120b37e852e0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a7daf62b7cf555e8f089120b37e852e0_JC.exe
Size

173KB
MD5

a7daf62b7cf555e8f089120b37e852e0
SHA1

2c7d32c4c636291df406865bb256381e295c49cc
SHA256

d4169505382bea2859a16c7e8f301f2e1fcd8b33f6c220d6d634eec18ea0e96c
SHA512

3b77a7006a1cc2e1075ccaf19ed6ec5d6b869b4c1c4cbe648ead91ae6694022e2d506046870fe4d3fa59e30d48ea5b7cc549b734aa8dd32f7d28b7a4cdee8996
SSDEEP

1536:HIN9E8RW2ZgACLU2/NpWb3owdFLVa7h5s3ePOHd265dCKsp04mDmr2UC/G:HIc8RWrNcvXLM7u265wppSnlG

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a7daf62b7cf555e8f089120b37e852e0_JC.exe

Files

NEAS.a7daf62b7cf555e8f089120b37e852e0_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bijdhfdg
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE