urelas | NEAS[.]b6d2cfac26b710afec3f7674ed6c9c50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b6d2cfac26b710afec3f7674ed6c9c50.exe
Size

196KB
MD5

b6d2cfac26b710afec3f7674ed6c9c50
SHA1

27f4f0748cdbebd397a3d4be26982ad11b6212cb
SHA256

85911fefc1c958726f9114166b97196be746a0e0fb43bc64eed0b0da81957242
SHA512

5ed59cd52736847c0a81598fe724e72b6da9dda5cf5d2e204a034d144683fb639d88a43ad0ed8002d49e08c67a0bf932836d125729c861008c069acf282d6cf3
SSDEEP

1536:11Rp2bYAUpB1ew7m2/EYslHtJTLLo9ukonCH3r/rLRbM651G3FuQ5f:11mopnZcVLk5IKbM65M3F

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b6d2cfac26b710afec3f7674ed6c9c50.exe

Files

NEAS.b6d2cfac26b710afec3f7674ed6c9c50.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VDSVHDHD
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ