urelas | 74bd986ac84884be3dc537835d5c726f3aa74400ca6f2024df6fceb272b9dae9 | Triage

Sharing

General

Target

74bd986ac84884be3dc537835d5c726f3aa74400ca6f2024df6fceb272b9dae9
Size

485KB
MD5

9381517a4c24d290f5f2fa3d1f447cb0
SHA1

a8f37f77012f18bf6e672ce7995cf5111f429e85
SHA256

74bd986ac84884be3dc537835d5c726f3aa74400ca6f2024df6fceb272b9dae9
SHA512

f6beeaffb7f7254bafc0cae15f9f2175ae1eff3ed333ecc0b178a9d29907d901f2fe41b58f615433b13da92bffc6c40e82ba7e70f6e4f51423fef221d1440396
SSDEEP

12288:2pbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbc1:2pbXi5xzFUBaazsiofx8u

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74bd986ac84884be3dc537835d5c726f3aa74400ca6f2024df6fceb272b9dae9

Files

74bd986ac84884be3dc537835d5c726f3aa74400ca6f2024df6fceb272b9dae9
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 245KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ESER
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ