urelas | bf7abe2717cc4fa311dff6d03493bb70N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf7abe2717cc4fa311dff6d03493bb70N.exe
Size

112KB
MD5

bf7abe2717cc4fa311dff6d03493bb70
SHA1

605c653c30609f93eb02d127e76025205b8ea4a7
SHA256

7626137aaf0c69caf12b246615c8e46875fe07325cbd11bc16f1cbe7b9cb299b
SHA512

e72d243cb76c5aa1959d6045365ebf7cfc19122df061fbefddea2bcacc6f5f7775294ce13d09bedb3470bc0c3c4ab251f7f0a7d8050b73161bbfbe7dccd51764
SSDEEP

1536:3JoHHwAnTtIBcNCk+syhonfC3GNKcK7+sWjcd8sWL64TGFju+y:4tCc+/h0fmSid81L64TGVu+y

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7abe2717cc4fa311dff6d03493bb70N.exe

Files

bf7abe2717cc4fa311dff6d03493bb70N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OPSDGWFD
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE