urelas | 11743d6331721c26cdbc6801237a06b0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11743d6331721c26cdbc6801237a06b0_NeikiAnalytics.exe
Size

127KB
MD5

11743d6331721c26cdbc6801237a06b0
SHA1

64265140c04c706991ad23b080b171364646a5e0
SHA256

a6578bd894b52a1a2609169f7ce4760abab623427e849598710de8de288fa154
SHA512

3887c5bb8b5410d734d574404c220ce6875cf966a378b1dd9193707ba76ce3978626ac62c87df91f9032320534de583f77198208e6b8ec9710586a9b537e32f4
SSDEEP

1536:YVlFv161OAdjqyqA+QtBN7JEC+Lvpmbm8JsuPLNcxIsWjcd2629V2:qlFv8dvfdEDRmycYX26298

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11743d6331721c26cdbc6801237a06b0_NeikiAnalytics.exe

Files

11743d6331721c26cdbc6801237a06b0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ