urelas | 40915e684096eaaac1c105c43de63df2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40915e684096eaaac1c105c43de63df2
Size

512KB
MD5

40915e684096eaaac1c105c43de63df2
SHA1

7c47b4514f11bf9811afacc39802bb4b3543ac1c
SHA256

982a4839f1cd8bb2090cd8d35bf41acfa55c28606694710161400485a0f224a6
SHA512

eadec4dcd851764496247fc9031822b98c9ba86387b46c06edc7f82242642281a31e1418a4367a51ec0cd28748ba52fcf8b0c2f59f124923cb2e20aecd32838b
SSDEEP

12288:kdBNKTCqqwXCcdgT89+MvA+BisqYpxHtM7:kLjQC+fs06

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40915e684096eaaac1c105c43de63df2

Files

40915e684096eaaac1c105c43de63df2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ