urelas | 635899406c4733625022728a06f858f6_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

635899406c4733625022728a06f858f6_JC.exe
Size

145KB
MD5

635899406c4733625022728a06f858f6
SHA1

5b8136e0de990fdc4f43c4f2f2305f2465da4850
SHA256

6a78836c2913db98f8442eaff57c10d8019cb6988eafdb9f371c5627c1fa9497
SHA512

152f6b7be17ce7d908f74f47f18f19e82cfec2a6564efb35a50644dad8230a48afe101670d9ec6d35986944e7d74bbde271e9938ac7882b97ca1f69460e6d7bd
SSDEEP

1536:X0MXVO8LWbp4Zt/kvT2/AWbAoUETLKyUGDeF3eP8UVuJ65RG01spIvOF5fLz9:X0M4Tp4biALbUGcJ65Q0qprPz9

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
635899406c4733625022728a06f858f6_JC.exe

Files

635899406c4733625022728a06f858f6_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fsfdgdfg
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ