urelas | 0ca31ff5e80304ea32b50b75dd5c0cba797b3ebeb90f0989eefa2c967970772b | Triage

Sharing

General

Target

0ca31ff5e80304ea32b50b75dd5c0cba797b3ebeb90f0989eefa2c967970772b
Size

133KB
MD5

03b385092c85834617866020d6f71d11
SHA1

44be848d911a74a0654d2a5aa37be34b4d05e456
SHA256

0ca31ff5e80304ea32b50b75dd5c0cba797b3ebeb90f0989eefa2c967970772b
SHA512

3b7e78952c926c3a0515298e4576e4f87186ff3d46f07f9e50b2baaf122d24a5eb7800a70c97b30d9e4b327407f473e74a7e63354b11e459ff461ba2dfbb3f58
SSDEEP

1536:CBrmUAJRSvweu6Id6vsqsYpRsW1D7kODiZUfZkKDzO/kC0VUQgMIGhocflpcU:CB9AJRSvTvHN7xkKGsfPIGhocflpcU

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ca31ff5e80304ea32b50b75dd5c0cba797b3ebeb90f0989eefa2c967970772b

Files

0ca31ff5e80304ea32b50b75dd5c0cba797b3ebeb90f0989eefa2c967970772b
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ