urelas | NEAS[.]286f2253dee45da0fbaa8b0154631240_JC[.]exe | Triage

Sharing

General

Target

NEAS.286f2253dee45da0fbaa8b0154631240_JC.exe
Size

160KB
MD5

286f2253dee45da0fbaa8b0154631240
SHA1

57bd8b8d89526c472936993886eb744c1bfd820c
SHA256

2a3fe373e3f7cdafec5bfa80bf354a5058f38aadcd6ecbfe90a3f1ae14d5d621
SHA512

59baa3d8dad6bb3b9034dc854c53beba5c579cc2c7418c91e1b49a56093452d3b11977254318578c231b345352736ce8326aacec6cbe499c299ffe543db5dc46
SSDEEP

1536:vL6OVpAnF3FuCEZcr0dnKM4V41kWm7J8Cu8asuP5c1QBPsWjcdXEqI6mNJYqvv:D6OVSFHTVO5IJ8r58QBwU/6mNGq

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.286f2253dee45da0fbaa8b0154631240_JC.exe

Files

NEAS.286f2253dee45da0fbaa8b0154631240_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ