urelas | 4dd5c86ec71335f0af3fa9a44fb42a5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dd5c86ec71335f0af3fa9a44fb42a5b
Size

115KB
MD5

4dd5c86ec71335f0af3fa9a44fb42a5b
SHA1

71f5e3099a009fd0f8250e7a0ac366ef08c66d6c
SHA256

ee0e1eabea4e44f67a488b39fd4b9d6eba49078c8f8a91b838672f255e6138cb
SHA512

fc8ed66a454aede6b1d9975d1bd8f7e89f128d41eb27460ffd4857e8412b228d73ec6c6a1aa1e71cd484996926fdb4cf3ecf0fb741c3a538d47cf639b860d652
SSDEEP

1536:Q2IzJdvRNtIBc6oSCv1WMW/3Gk5cTersWjcdK6UFdfU4:QvHC9C9WZvnqeUK6U7fU4

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dd5c86ec71335f0af3fa9a44fb42a5b

Files

4dd5c86ec71335f0af3fa9a44fb42a5b
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UISDIWOD
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ