urelas | cc2fc96603411da8f4cb845467a5920e_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc2fc96603411da8f4cb845467a5920e_JC.exe
Size

141KB
MD5

cc2fc96603411da8f4cb845467a5920e
SHA1

f0726f0d8ce975f9db80b2b27ab87f70dcfc36d3
SHA256

bee372d58a7ff330a7ab6998d07dd090164f3ed6fe2c28e9f8d00de08efdf317
SHA512

3259a6151efbd470db162082bfbd454c7f31321dc5878860af2265da998a05079635a191f37b9290fc5ce84bd2bb3b7f7e8a647b828de023f786ffdfc3c49251
SSDEEP

1536:1i+N6u0utYGsoK2mEGIBp+WWN7YfEj77iZ76vVGU2AjK15t5uPpdrcIPWAWvT:wYYutRQSc/7c6tJK7t5uPpdrxOhvT

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc2fc96603411da8f4cb845467a5920e_JC.exe

Files

cc2fc96603411da8f4cb845467a5920e_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ