urelas | a58c08b5b0ac12a3df3611d1531df741c9510c755efaff0e8668a54b20befc21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a58c08b5b0ac12a3df3611d1531df741c9510c755efaff0e8668a54b20befc21
Size

177KB
MD5

7d984cc301571dd68b98a7b4f9bf4d8c
SHA1

4bd6cb405bff81794c615a63d4af8539b20def16
SHA256

a58c08b5b0ac12a3df3611d1531df741c9510c755efaff0e8668a54b20befc21
SHA512

92d9cdb6314b17d7f3f1a07175acf4c5ebd9cbe743ac97e747c712fa4661a533038f66f5c867804860059327103d485b76d1ea24d9b18f57dbdd3e2ade43e50b
SSDEEP

1536:HIN9E8RW2ZgACLU2/NpWb3owdFLVa7h5s3ePOHd265dCKsp04mDmr2U1m2:HIc8RWrNcvXLM7u265wppSnMh

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a58c08b5b0ac12a3df3611d1531df741c9510c755efaff0e8668a54b20befc21

Files

a58c08b5b0ac12a3df3611d1531df741c9510c755efaff0e8668a54b20befc21
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bijdhfdg
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE