urelas | NEAS[.]02565a92286e5fa6e8fec6d1afc30820_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.02565a92286e5fa6e8fec6d1afc30820_JC.exe
Size

196KB
MD5

02565a92286e5fa6e8fec6d1afc30820
SHA1

3b93c5836dcf826f2846070a1b18a7c804767c50
SHA256

0bf1d0d95293cef3ee04c1dd643fce9fa1387775aeb3dba50b537c64722d4f99
SHA512

fb362b9ea582b69ecbb92e992a8a9ea03293ead77cd3f15449dc9cbbfbaff47a464d7ee1956bdeadaf193a9afc21b39aeb558a8274f787e1430f9abe4cbe6385
SSDEEP

1536:irkD4rEeWvKIE9W2PSGUwOnSOLkcgSokYD9ht3ijd1m65nL/3rTdx:io0rEeWsSPTLgSo19cm65L/3f

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.02565a92286e5fa6e8fec6d1afc30820_JC.exe

Files

NEAS.02565a92286e5fa6e8fec6d1afc30820_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NISODKOI
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ