urelas | NEAS[.]0a8b6a0c6658a3432e06c6ef6cb76250[.]exe | Triage

Sharing

General

Target

NEAS.0a8b6a0c6658a3432e06c6ef6cb76250.exe
Size

380KB
MD5

0a8b6a0c6658a3432e06c6ef6cb76250
SHA1

1203c764af0a7a35a469718b6d72aeaad89ddef2
SHA256

0bb70084b517b73484d012fbf1a3f9d1dd3db07faa5a47b1db39a1d24db926fb
SHA512

1863e1232373d202add486c4669b1bd4aaaa4585a70d2e600fe23f0c405ff16fcf04757ca600270cb90d7bf1acbe53853e7cd5c5be6bee8d9915882d504aa6d5
SSDEEP

6144:dFBFoLzfk9fYzr/w8hsaMPL5z2WzmYp9pD6UFEMk02l:v9f4r/w8hsaMPt2WRp6cEt9

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0a8b6a0c6658a3432e06c6ef6cb76250.exe

Files

NEAS.0a8b6a0c6658a3432e06c6ef6cb76250.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ