urelas | 2ed75d97034d923287468cf3b01c5430_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

2ed75d97034d923287468cf3b01c5430_NeikiAnalytics.exe
Size

143KB
MD5

2ed75d97034d923287468cf3b01c5430
SHA1

aee50c4e1fb76e3195b6d17ee9068033856fb419
SHA256

b40598326f4a5fa178d14668da93fcf76280779554d9fd3f04a6cafb5a69f32d
SHA512

23610098280ff119bccd65a5d492d5458a7207d0a186777dad8925ffe57bcbe020ff829d7c7c6a054c706c3a7adf152f7c242c39b3f0153efa38b3748f58c5fb
SSDEEP

1536:dADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GGW654mDnvpxy:dADA0Wc7UJ6LZMaHOW65ZDvpx

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ed75d97034d923287468cf3b01c5430_NeikiAnalytics.exe

Files

2ed75d97034d923287468cf3b01c5430_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ