urelas | NEAS[.]38891544d7d3ac5bdf2db9929778e6f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.38891544d7d3ac5bdf2db9929778e6f0.exe
Size

176KB
MD5

38891544d7d3ac5bdf2db9929778e6f0
SHA1

c2ea5f1cad8833c6718f1d60201e93e28419c92a
SHA256

9a34a8179a2d89f7a0c3a1dc7b94bdbb728f49e58561463006b2689b99fb282e
SHA512

74ffcd8854c3fd32ac65f5196ecb9d5d8066d2dc1ece3be74a5d6f04e3f005c18d7638fa255290ef82b15be894deed80c84477a7ffc3583ce24490d47b4cf88a
SSDEEP

1536:F/p+VaQapzpcKl42/yAafd24BDLl8T4ZmL3J/LLFQk65fVspMvOv5f:F/EKpRbM1LeTg2FQk65fKpH

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.38891544d7d3ac5bdf2db9929778e6f0.exe

Files

NEAS.38891544d7d3ac5bdf2db9929778e6f0.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fsfdgdfg
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ