urelas | 68238db312732fbd5557a3f95b058fe83a3dc1fb5b84b4f1e668344c72fde549 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68238db312732fbd5557a3f95b058fe83a3dc1fb5b84b4f1e668344c72fde549
Size

133KB
MD5

04ee4a85ef96ab228ce707c00b6413d7
SHA1

71c35ec7d51cfc5eb448c77d4dd4512a752cc4c3
SHA256

68238db312732fbd5557a3f95b058fe83a3dc1fb5b84b4f1e668344c72fde549
SHA512

92e84481f2a28665ae2020e5939f5de4b4db99684a1723f23ef7469a8538168839b6417285904bea03fa2c6409ce5ac11c0353f7cc8addcf797125c807e13cf5
SSDEEP

1536:IGBozpvLpc3lM8/KedqfTnB8Yux9W1jVTTZufp6kKZLVBzRIUggn/HuoMdpuq:I0UvLa3mfTpNuAkKZZBdB/HuoMdp

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68238db312732fbd5557a3f95b058fe83a3dc1fb5b84b4f1e668344c72fde549

Files

68238db312732fbd5557a3f95b058fe83a3dc1fb5b84b4f1e668344c72fde549
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ