urelas | 0f5b5315f3ad581d08cddc5001684f6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f5b5315f3ad581d08cddc5001684f6e
Size

494KB
MD5

0f5b5315f3ad581d08cddc5001684f6e
SHA1

08e77b5883a11c830c2c9831fc157347151fb2ef
SHA256

d1868dcc4983f307a2795b167bf1333c638485ddf5a4cc397b8b2c24c6301195
SHA512

5438c754a868e58f589740ee0cd36fd7bbb03d744a1ecb4509b0ee67d24a38168d23b35e486a70098c2b1b591ad1deceddcc64e8b4776029946066e0084ce6bc
SSDEEP

6144:NKLOgsgomKLEFESGz0SPpeEPkPDPrzgtRY5RdrHc13FG9ItU6GvPwt:AOgwmisETzuaeDPvjJ81VGqK6GvPY

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f5b5315f3ad581d08cddc5001684f6e

Files

0f5b5315f3ad581d08cddc5001684f6e
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 185KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE