urelas | 3d026d343fccd211eb06fd12cc27f460_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d026d343fccd211eb06fd12cc27f460_NeikiAnalytics
Size

173KB
MD5

3d026d343fccd211eb06fd12cc27f460
SHA1

8ef79f458db709f17801850eb9238bab642a15c6
SHA256

5acecf1334c7b0344252227b350b779a8d6cbb76307da06c051cf8d16afa6877
SHA512

6082e3ea812951660470e045ff90bdd20d77b157a644e43839d78e5a6a410cd30c8939ff9f4f4ec761467365942eab3f735a93689aba27856bc843c79ad97af7
SSDEEP

1536:fIN9E8RW2ZgACLU2/NpWb3owdFLVa7h5s3ePOHd265dCKspXmrj4mdU+z:fIc8RWrNcvXLM7u265wppXCz

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d026d343fccd211eb06fd12cc27f460_NeikiAnalytics

Files

3d026d343fccd211eb06fd12cc27f460_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bijdhfdg
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ