urelas | 2cba252aea5aeb4f4234f83ee2e0fee0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cba252aea5aeb4f4234f83ee2e0fee0_NeikiAnalytics.exe
Size

133KB
MD5

2cba252aea5aeb4f4234f83ee2e0fee0
SHA1

e2c89c3da3ee3b1880fe5c959dacf924405b0806
SHA256

3713d3624c8e8a4f29e40eb523a09768e589b131123be5a06e60aa99ce7c2ed0
SHA512

91a0117f7f6298928f3262b18e93141eaa1e9282fb6deb08fa6ad773f03d514441e415a060940b37393b1e2ff8fac125f5f6758c07576a6fcc4a9e09be135b29
SSDEEP

1536:CBrmUAJRSvweu6Id6vsqsYpRsW1D7kODiZUfZkKDzO/kC0VUQgM5GhoQRpcU:CB9AJRSvTvHN7xkKGsfP5GhoQRpcU

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cba252aea5aeb4f4234f83ee2e0fee0_NeikiAnalytics.exe

Files

2cba252aea5aeb4f4234f83ee2e0fee0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ