urelas | 20d821866bd2d9c37b8d9f65f6e1b580_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20d821866bd2d9c37b8d9f65f6e1b580_NeikiAnalytics.exe
Size

133KB
MD5

20d821866bd2d9c37b8d9f65f6e1b580
SHA1

c7ad4ebcac1095bcb275bda4962bb8e376bdf4bd
SHA256

901e55a7f45fc3b563b98bb0042b6b7be12ee91f03502e1c60bf08f3f6e8d7d6
SHA512

066996c3ba590ec460b65a70b27a2d934767a9eee35d98bfdef3efb7dd4f8eea58c78e72c2e3aeb16b108fca2631a440780d597b44009d82a55278fb2493fd58
SSDEEP

1536:IGBozpvLpc3lM8/KedqfTnB8Yux9W1jVTTZufp6kKZLVBzRIUggn/Huo0Vpuq:I0UvLa3mfTpNuAkKZZBdB/Huo0Vp

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20d821866bd2d9c37b8d9f65f6e1b580_NeikiAnalytics.exe

Files

20d821866bd2d9c37b8d9f65f6e1b580_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ