urelas | a2d939624aa471cb65e19a8a027bf5deb6e09e21c25224333a1854ff94716049

General

Target
a2d939624aa471cb65e19a8a027bf5deb6e09e21c25224333a1854ff94716049
Size 123KB
Sample240312-a14a2sdb34
SHA256 a2d939624aa471cb65e19a8a027bf5deb6e09e21c25224333a1854ff94716049
MD5 7503383e27b8bf8eff4e23464a7a41c9
SHA1 48d146be2c5e3eb5ac6c3283ab61e0e854aa1edc
SHA512 d34abca9e9422dcbb56f311546e0198321d3fb7be3f580e3479c75b3ec76568a0043b4ea2401b826c8c2f543fef3945724d822982e6328329b62b2daf848f1bc
SSDEEP 1536:DVih9jjOABjWAqUffzNoBcTwE/sNW4Am8NsuPz4cnSXsWjcdy6YAiQ45sIsR:DVSRBPCoLY5RIzNdy6YO45O
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2d939624aa471cb65e19a8a027bf5deb6e09e21c25224333a1854ff94716049

File Explorer

a2d939624aa471cb65e19a8a027bf5deb6e09e21c25224333a1854ff94716049

.exe 123KB

a2d939624aa471cb65e19a8a027bf5deb6e09e21c25224333a1854ff94716049

SHA256 a2d939624aa471cb65e19a8a027bf5deb6e09e21c25224333a1854ff94716049
MD5 7503383e27b8bf8eff4e23464a7a41c9
SHA1 48d146be2c5e3eb5ac6c3283ab61e0e854aa1edc
SHA512 d34abca9e9422dcbb56f311546e0198321d3fb7be3f580e3479c75b3ec76568a0043b4ea2401b826c8c2f543fef3945724d822982e6328329b62b2daf848f1bc
SSDEEP 1536:DVih9jjOABjWAqUffzNoBcTwE/sNW4Am8NsuPz4cnSXsWjcdy6YAiQ45sIsR:DVSRBPCoLY5RIzNdy6YO45O
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

25945

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

74KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

23KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

IOSDWD

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a2d939624aa471cb65e19a8a027bf5deb6e09e21c25224333a1854ff94716049

generic