urelas | 31ac6bcc0946303808fc513093e9aab9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31ac6bcc0946303808fc513093e9aab9
Size

266KB
MD5

31ac6bcc0946303808fc513093e9aab9
SHA1

7538aa24caddd962432fd0b71d09efffc6712177
SHA256

af587bb2c9666bbe26a64f3e242b4f303200f7d0dcad3d2ce1744a4a7ea15970
SHA512

3325ef75fa1096d2eb8233e81a6e37c04b7198fb16deaabf4c166917985086963740ef1fdbf2d31f55136c31cd46e21f99c6335ffd4d01e2261d1ebf22bc1b44
SSDEEP

6144:B5ibQcmlVD+BgotLvTtehd1wLIE92FJ1wZyZUBiT5:BUq+BgotLvTtehd1wd92FJ1H5

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31ac6bcc0946303808fc513093e9aab9

Files

31ac6bcc0946303808fc513093e9aab9
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VSDHGWHD
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ