urelas | d6c653f7a87cb1c2e04e0cf35dd5db2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6c653f7a87cb1c2e04e0cf35dd5db2b
Size

207KB
MD5

d6c653f7a87cb1c2e04e0cf35dd5db2b
SHA1

bd34e6b6d3b0b3332deabba7c413bc3926c28f4e
SHA256

6906fe40b84ee36ff4819ad73182c97d2045950d5cbc4f2e7da45835ed2ea5f6
SHA512

6c2c7ccaddfeaf7a9f26e40d8fbe56aec5c8054667122e665968394639c10f041ded04f330cd5db6fab3b57e28340562a06954d88a52a1fc4bab8870c625de4b
SSDEEP

1536:MBucKHs7K2HEG7BpoWiZBYHs977q+7INVdU2Aneb6KTVcz+3MfJuwc8U:euchogM57bIL+eb6KTVa+3MfJuWU

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6c653f7a87cb1c2e04e0cf35dd5db2b

Files

d6c653f7a87cb1c2e04e0cf35dd5db2b
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 145KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE