urelas | a30e1a4df6a7675c7f7e7c2ba6848b80_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a30e1a4df6a7675c7f7e7c2ba6848b80_JC.exe
Size

165KB
MD5

a30e1a4df6a7675c7f7e7c2ba6848b80
SHA1

72777c9c0a68142a5434bae2165d41bf54256304
SHA256

2f6579247cfabc030c92d5d7cf21cc35c69be78cdfb8cecf7f45d6a19e20b1ee
SHA512

3062161860e50f615111f58a60e5cb5210f2b4db8049115f510e1bcacc9fce4a4efaed76e36835237a5486167bd330f31a7f4a82c9ef24adfd18f434fa688d38
SSDEEP

3072:t9AJRSvTvHN7xkKGsfPNGhoIPpPVUw2IIA:t9AvSLvHNdkKGbHPpP+w4A

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a30e1a4df6a7675c7f7e7c2ba6848b80_JC.exe

Files

a30e1a4df6a7675c7f7e7c2ba6848b80_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GTDTSYDW
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ