Extracted

• • Target

    f83323aa1081ea6fc2e1a032e9ca79b3_JaffaCakes118

  • Size

    405KB

  • MD5

    f83323aa1081ea6fc2e1a032e9ca79b3

  • SHA1

    972163fccf0ab944c5f4fe4dcf588d713cadee76

  • SHA256

    1317ee800fc8d120067fcbfe997cea4c6c518a92241e3cd10648d324c1703bf1

  • SHA512

    445cc8641d984f9b9d18cf65a47f2983be07cee3f097b09ebc799b48dfb355d2ab3d64c5be817d2200261a852caca8ddce2bae6babb583bf2c9b602d11ed3fcf

  • SSDEEP

    6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInODgI:oU7M5ijWh0XOW4sEfeO8I

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2