urelas | 72fbd5017f31252b78328e6cd7e73fa0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72fbd5017f31252b78328e6cd7e73fa0_NeikiAnalytics.exe
Size

115KB
MD5

72fbd5017f31252b78328e6cd7e73fa0
SHA1

5e59078efcdfcc1e3df1f28d5e0cc56f5e74c508
SHA256

b0fad7f88ebf494c610ca2aff947349c8b3eecc723b1f67b42373c39b97bfd23
SHA512

2aeacf24299665c5705fa6fca8a80d4b91cb3cc6c5c15b70a92bb3ea0d20c555cb6deb7890c472c65195214b8a8f804e976496cf5f8820133c42fe4f53cf4be3
SSDEEP

1536:E/k0JjaN3J0zsD9Yh8nX4+C7NMycFvSXGIbc6tMrsWjcdD6JNVMR:E/lJjY1i04l2Fv2fZtMUD6JNVMR

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72fbd5017f31252b78328e6cd7e73fa0_NeikiAnalytics.exe

Files

72fbd5017f31252b78328e6cd7e73fa0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ