urelas | 2452f81157fc088c14d16a7290419a30_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2452f81157fc088c14d16a7290419a30_NeikiAnalytics
Size

497KB
MD5

2452f81157fc088c14d16a7290419a30
SHA1

e9137a1203d62ca89f24f549e59a73c1ea996b66
SHA256

30ee0c0a7320b9b6394b2abd4de64f2da023d69e029aac9335dfde6dcca32800
SHA512

e498b6f9c6e3507c345483d66ea29d9540bcbc6966d395c4d0f120bd0dfc845923b4fa9c0de87a5f02b2cae5b544c4983fc1e7ff0fe9395b3b104f7d01757b6e
SSDEEP

6144:PKlrBc+aRw0XqeQIoUtqPjQXF3L/06ah2EYdoT6X9MtMl7sBWMweiHalcBpMu21:Mr2yIoUtq7QXF3Q6vyD27WW5XuJ

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2452f81157fc088c14d16a7290419a30_NeikiAnalytics

Files

2452f81157fc088c14d16a7290419a30_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 251KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSCW
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE