Extracted

• • Target

    5dddd08e4fdcee8d2b35f0d0d5c67843_JaffaCakes118

  • Size

    412KB

  • MD5

    5dddd08e4fdcee8d2b35f0d0d5c67843

  • SHA1

    047186408399fd8424aa303585784835ae18418f

  • SHA256

    871dbc7cc50b089c62a20e0dd5809f124947f31e1c0d8ccb73169b5ea6064279

  • SHA512

    1ea04c754ee35b011ba332ea79fc3ad59cb3db539b3f486991981d969e1e2c3b7b93cdd9c67cfbd3bce9b8fb1feb88d18ddc5a094a7e1e13336a69d73f08a25a

  • SSDEEP

    6144:kzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOYR:eU7M5ijWh0XOW4sEfeO+

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2