urelas | 0f97aebafb180f8ad84eb3b648dde9652ca1355371cba701dd6ce6014386ea95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f97aebafb180f8ad84eb3b648dde9652ca1355371cba701dd6ce6014386ea95
Size

504KB
MD5

10c6aaa0eb25ad2d218fd9bafb4a0467
SHA1

2cd009c99a3918a754cb7d35deca48e3b52dbab3
SHA256

0f97aebafb180f8ad84eb3b648dde9652ca1355371cba701dd6ce6014386ea95
SHA512

e6ed32aeaf8f388f5a4de0b6364b83fe799703ddabc9e2d041e81e34a43882774912a552965b7335d675de7682babc5fea455ae46293e7bf2de68ae5deb33627
SSDEEP

12288:6uGtVfjUBSaoINAHT19UWvMucSlFgIOguNvP/6xw:6bt2/NA3UWUuBlFLUvaxw

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f97aebafb180f8ad84eb3b648dde9652ca1355371cba701dd6ce6014386ea95

Files

0f97aebafb180f8ad84eb3b648dde9652ca1355371cba701dd6ce6014386ea95
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 488KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE