urelas | 651890228e0600032e87a97afd9351eea05f0473918513e4fcdfbdc0e4fb10c6 | Triage

Sharing

General

Target

651890228e0600032e87a97afd9351eea05f0473918513e4fcdfbdc0e4fb10c6
Size

417KB
MD5

f1711791cd5a046b0b6b840b832a99e2
SHA1

460ce3c2310440ad1f7fc14fa250bee46df852d1
SHA256

651890228e0600032e87a97afd9351eea05f0473918513e4fcdfbdc0e4fb10c6
SHA512

30c87873a4e087d5a9ed1107381b1f1465037bf1eda31047409874d24e11c38b066bac85284abaa2d6169f40f7ed42f1bf5c5b9939be68d56199f35ea38fe17a
SSDEEP

6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBw/ib:yIfBoDWoyFboU6hAJQnrMQ

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
651890228e0600032e87a97afd9351eea05f0473918513e4fcdfbdc0e4fb10c6

Files

651890228e0600032e87a97afd9351eea05f0473918513e4fcdfbdc0e4fb10c6
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 106KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 225KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HJSDRTRW
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE