Extracted

• • Target

    5838e56cfdf1d8d3cd62062286fec1c9_JaffaCakes118

  • Size

    466KB

  • MD5

    5838e56cfdf1d8d3cd62062286fec1c9

  • SHA1

    99b01e5d0f468a6cd7757da5494c7d333ef87b26

  • SHA256

    0a985861a594bcd56d5da1ceb146d50c419497d4730d5728c832376e232692f5

  • SHA512

    ca5e738615b2aa163c8b0f2aa9a899dccc40506ab0f6c844d5312f4e6ab40f347de20b73ed88dee5260ae07226964279fef415aafffe2fd4b96856e42663388e

  • SSDEEP

    12288:m6twjLHj/8/GcHUIdPPzEmvTnabAh0ZnAr1UF7:m6tQCG0UUPzEkTn4AC1+K

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2