urelas | 02fe1c8b73dd25d5233eec3449c6df40_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02fe1c8b73dd25d5233eec3449c6df40_NeikiAnalytics.exe
Size

133KB
MD5

02fe1c8b73dd25d5233eec3449c6df40
SHA1

41f5c2f1a7047b45181d0cfd64eb2d40fc0b7ae6
SHA256

d5fd3d521e6caf93b6d6a0697e937363ddae2e94152413f6e0d9f89255c84b29
SHA512

0acf998edc3eddc15974b1b3699264771969c999f7d67fc356c450ecf144cb1ae78f54519d705be18a7211f525a6dea5f77b528d1fa55cb301df1299b14c9959
SSDEEP

1536:CBrmUAJRSvweu6Id6vsqsYpRsW1D7kODiZUfZkKDzO/kC0VUQgM9GhoF6LpcU:CB9AJRSvTvHN7xkKGsfP9GhoF6LpcU

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02fe1c8b73dd25d5233eec3449c6df40_NeikiAnalytics.exe

Files

02fe1c8b73dd25d5233eec3449c6df40_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ