urelas | 26e40dd979a1397f73c0e5d4a08aa91c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26e40dd979a1397f73c0e5d4a08aa91c
Size

208KB
MD5

26e40dd979a1397f73c0e5d4a08aa91c
SHA1

f728e69f70f331e754bb1c096dea0ff8916dd8a1
SHA256

2ea126ace8f16ea3e472b1927167d18543f0720c04ad019549a84be02da99e50
SHA512

ee372829b8ebe4f718522131f12b0b622f783edb8811b60e0a441835a480ae7405dc62f3345e88f70e08b9a5f6e1b42a0ac8fbb254c68e3289834126e79140e4
SSDEEP

1536:1BucKHs7K2HEG7BpoWiZBYHs977q+7INVdU2Aneb61TVcz+3MJb6rcRSN:PuchogM57bIL+eb61TVa+3MJb6VN

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e40dd979a1397f73c0e5d4a08aa91c

Files

26e40dd979a1397f73c0e5d4a08aa91c
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 145KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE