urelas | 100ec9d34175c63d0e5748b2732a1084 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

100ec9d34175c63d0e5748b2732a1084
Size

556KB
MD5

100ec9d34175c63d0e5748b2732a1084
SHA1

9edfce109d2800c2ea9affa1b38385f4343010e5
SHA256

5722ff8057a44246f5e0b124387a34747432ea6a28b343072eafa96ccdf92c47
SHA512

bde50c86481c62824ed02a9e0a859571c408df8405a423e8f3ade2f9b73b7d3f97a7a3949781e2d1afaad4f332c2ff5c98a6c5c23e9b58cbed0f57f6d9aaa43e
SSDEEP

12288:zccNvdRExZGe+Q1nSoS++43x+l7QLiaEyH:znPfQp9L3olqFH

Score

10^/10

upx urelas

Malware Config

Signatures

Urelas family
urelas

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
100ec9d34175c63d0e5748b2732a1084

Files

100ec9d34175c63d0e5748b2732a1084
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 229KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 219KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE