urelas | 6422255fa1cc9f22ce2ed173387f0420_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

6422255fa1cc9f22ce2ed173387f0420_NeikiAnalytics.exe
Size

146KB
MD5

6422255fa1cc9f22ce2ed173387f0420
SHA1

32ca45b56c0dfa533f3a2f12e2fc7241cdd49863
SHA256

87ec34a9a4cf7ab5e06b713b4eb9860a67c393fe8e0b7feec7e7e5ad4b4b9fa4
SHA512

f711e07c13389eb8cf82925898ec1364fd8af05b9dced79a2abd02e1b7cbbb376387435610ca84133c877a29e44932b416ded3edc94e0b20f4c652d66208ae40
SSDEEP

1536:GaRbZZg6X2npEo2GHUj2/92r34fxhL1roDiiIGT5pUx3uvM9E65479pjBh:GaFZD2npEioIHLtoPIGT6E654RpjBh

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
6422255fa1cc9f22ce2ed173387f0420_NeikiAnalytics.exe

Files

6422255fa1cc9f22ce2ed173387f0420_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ