urelas | a8cfc058914e28b688daaf5b57210450_exe32[.]exe | Triage

Sharing

General

Target

a8cfc058914e28b688daaf5b57210450_exe32.exe
Size

432KB
MD5

a8cfc058914e28b688daaf5b57210450
SHA1

ec82627ed4b4301477652947c7f8435119cf6062
SHA256

9588874dd22074db2874f863c981d1f7b99ab18b48c950409c1231d85a9fc5d5
SHA512

22adfb8a64350492b04849a5ec2a17e8f341f4a9c097f4d3c955d6529c6e9d68224295558c6c0de74546ea9fbd1006dcb7f653ac29d3e2f9b68a40d782a9aa6d
SSDEEP

6144:FfwGkpH8+kNvAqa/nqXHc0RLG0aOBAf70GbjUwMD9n/lR7e+XpM:ppkR8+kKqa/SHcuLHBS/MD9tR71

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8cfc058914e28b688daaf5b57210450_exe32.exe

Files

a8cfc058914e28b688daaf5b57210450_exe32.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 230KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

YUHFDGE
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE