General

  • Target

    b13d93849c8d302105195c4be4e0b81c7a6ff2ee3ec30117f9098a6bc905e254

  • Size

    205KB

  • MD5

    7c63a46674df0004a761de60498dc7d2

  • SHA1

    bdfde1ffb55bf45d59ddd7bed00140e980e0d16b

  • SHA256

    b13d93849c8d302105195c4be4e0b81c7a6ff2ee3ec30117f9098a6bc905e254

  • SHA512

    b5805f1b6316d61a9f11a08380b7a0440cc5e3a31bec84b92002d860514de1033b414bd165e36d880d4ab3a8daa99e2e4f995c36d4dc2a4c13db2f51d8bd0363

  • SSDEEP

    1536:XNl3duc1qc6xd6vpi0YZUlWO/ZdRUU3baQul0W0LUQwanOzg0Ss2nB7Gz2hweB:bNucfvLBkU3b82rnOzg0Ss2nB7GzteB

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Urelas family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b13d93849c8d302105195c4be4e0b81c7a6ff2ee3ec30117f9098a6bc905e254
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections