urelas | 63340840f4c19a0eab23e3afceaa61d0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

63340840f4c19a0eab23e3afceaa61d0_NeikiAnalytics.exe
Size

134KB
MD5

63340840f4c19a0eab23e3afceaa61d0
SHA1

bdcf01f647311e617157a229984b821a009ab25e
SHA256

096a8920d1b0321ed255c4324e87feefe274d22c234a19ce5e993371aacc4f3f
SHA512

c74ebee55cdee6bb1d033db9cf42d8e34f5dc2cc0e5bdeaed218f85987c7c8167003e40765ee3d6aabb2f57c03e6c4b0cb8f3a2a361b7d6c849f5ae16acd2f93
SSDEEP

1536:uButSesYK2WM+I5RkWxF864bUz7TbE8eDV2U2gn7e8oUspj:QutPFoQvTbep17e8oUsp

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
63340840f4c19a0eab23e3afceaa61d0_NeikiAnalytics.exe

Files

63340840f4c19a0eab23e3afceaa61d0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ