urelas | 5604cc392acc34ef415eec6a95b79390 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5604cc392acc34ef415eec6a95b79390
Size

498KB
MD5

5604cc392acc34ef415eec6a95b79390
SHA1

8e48fd5f3c4d2f8bb7dd039c64922eb417f89ed5
SHA256

18f75805cd4c79b2b993fcc6175e329dc5c3210d8b0a2c1573822eb5eecfa079
SHA512

15f02bbfaea8eb0fde6ba319be59f5bcbc3cc8e61478350fbfe17f4107bc9a6f18f179c18caecf99db68e7a9a440ed612e813da5cd259cc2f50aaff65e95dc91
SSDEEP

6144:PKlrBc+aRw0XqeQIoUtqPjQXF3L/06ah2EYdoT6X9MtMl7sBWMweiHalcBpMu21C:Mr2yIoUtq7QXF3Q6vyD27WW5XuE

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5604cc392acc34ef415eec6a95b79390

Files

5604cc392acc34ef415eec6a95b79390
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 251KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSCW
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE