urelas | a20e3c51b22b3ee2b020e10a8ed9ff90_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a20e3c51b22b3ee2b020e10a8ed9ff90_NeikiAnalytics.exe
Size

554KB
MD5

a20e3c51b22b3ee2b020e10a8ed9ff90
SHA1

f3d5f913108c7ece49a2ea008c262999ff020b9f
SHA256

1c8dba18cfe06c81bdc0b0e2b07e588353c0d0522d7cace2b4185a45d5c3d1ef
SHA512

a821b8f82260e6ef4f2e6889c3c4931f137ec559de4a5fdc8b89e0e3bb0443128ff9337934be769151f121cbff328fdb6e236ad4bdfe98dfe9ea12b4ea24c1e8
SSDEEP

12288:4ydR9agkyl1R4Vz26eym75GEp/zL9svaGfFZ1J:4ydHl4Vi6/m7Aa1UaW7J

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a20e3c51b22b3ee2b020e10a8ed9ff90_NeikiAnalytics.exe

Files

a20e3c51b22b3ee2b020e10a8ed9ff90_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ