urelas | NEAS[.]68e07eb0e133de2bb908e8b25484b110[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.68e07eb0e133de2bb908e8b25484b110.exe
Size

196KB
MD5

68e07eb0e133de2bb908e8b25484b110
SHA1

9fbcebe87c68ad7e45324a5dd9277d1f2ea9178d
SHA256

c7c795a17b76a5fb3c86d0876938803dfc8bc0cecbb82c88b5363ed556e946d7
SHA512

b0de4dfe5bbaee54bc577e8d61e99eadd3213d953e1b1368d9df244bd31e0e060a51b91958a6eb4e63fe5e31da593028ee5333f30bc7e39d1ea1379ac092070a
SSDEEP

3072:qYKSLQivWOBiCs9LXkMnJrQnMtKMJrzjzO565Bwp0:qYKSjWOBivLX6Cwp0

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.68e07eb0e133de2bb908e8b25484b110.exe

Files

NEAS.68e07eb0e133de2bb908e8b25484b110.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cbnjiffe
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE