urelas | 42030236e2d5d3f93eb27cf3cecbd030_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42030236e2d5d3f93eb27cf3cecbd030_NeikiAnalytics.exe
Size

440KB
MD5

42030236e2d5d3f93eb27cf3cecbd030
SHA1

e7694d17d8c2586ea9fe7a6cb34ed5c7eb072f44
SHA256

97958abebfd24c91dace61a9d6e2940da87de3a5d8e8c7c17b0d4e746c6704a7
SHA512

f23096bf01282cb9c3da4def29c5e4624c69fc25b71c892652cdeb309818bf0db0573cb90478017657fe6fe747b043bf126fe4dbcbed9110a3e242089226db8f
SSDEEP

12288:76twjLHj/8/GcHUIdPvjEmvTnabAh0ZnAr1U:76tQCG0UUvjEkTn4AC1+

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42030236e2d5d3f93eb27cf3cecbd030_NeikiAnalytics.exe

Files

42030236e2d5d3f93eb27cf3cecbd030_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\PMS\pms4\Project(20131107)\GolfUpdate_2008\bin\GolfUpdate.pdb

Sections

.text
Size: 433KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE