urelas | 50f73d2e10f7398e4466d9c06ac1e91bd9cbed160d16a84c9813702974210821N

Sharing

Copy URL Twitter E-mail

General

Target
50f73d2e10f7398e4466d9c06ac1e91bd9cbed160d16a84c9813702974210821N
Size 505KB
Sample241001-gnkfqstfkr
SHA256 50f73d2e10f7398e4466d9c06ac1e91bd9cbed160d16a84c9813702974210821
MD5 ffd51bbb503dc754a220138cd34d4990
SHA1 ffc849d79f5b06aca4783607ffeb2b8c65c78173
SHA512 bb9d71648a4117e1ff815d4049cee61d69ef030e1fcc8761d6b71068d8c6be8d7b16f948e6fa10b3c1557556197397e966c19ee3d8251c1fdd9727f3beaa911d
SSDEEP 12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKod:3MUv2LAv9AQ1p4dKg
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50f73d2e10f7398e4466d9c06ac1e91bd9cbed160d16a84c9813702974210821N

File Explorer

50f73d2e10f7398e4466d9c06ac1e91bd9cbed160d16a84c9813702974210821N

.exe 505KB

50f73d2e10f7398e4466d9c06ac1e91bd9cbed160d16a84c9813702974210821N

IMPHASH c655066d0a2c4420aaa11c9556e7466c
SHA256 50f73d2e10f7398e4466d9c06ac1e91bd9cbed160d16a84c9813702974210821
MD5 ffd51bbb503dc754a220138cd34d4990
SHA1 ffc849d79f5b06aca4783607ffeb2b8c65c78173
SHA512 bb9d71648a4117e1ff815d4049cee61d69ef030e1fcc8761d6b71068d8c6be8d7b16f948e6fa10b3c1557556197397e966c19ee3d8251c1fdd9727f3beaa911d
SSDEEP 12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKod:3MUv2LAv9AQ1p4dKg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

95642

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WideCharToMultiByte LocalFileTimeToFileTime GetCurrentDirectoryW SystemTimeToFileTime SetFileAttributesW DeviceIoControl FlushFileBuffers SetFilePointer ReadFile GetFileSizeEx SetLastError LocalAlloc LocalFree LeaveCriticalSection TlsGetValue EnterCriticalSection GlobalLock GlobalReAlloc GlobalUnlock GlobalHandle GlobalAlloc InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc CreateFileW GlobalFree TlsFree InterlockedDecrement FreeLibrary lstrlenW FormatMessageW GetCurrentThreadId InterlockedIncrement lstrcmpA lstrlenA GetVersionExA lstrcmpW LoadLibraryA GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW GlobalFlags SetEndOfFile HeapAlloc HeapFree GetStartupInfoW RtlUnwind RaiseException HeapReAlloc HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree VirtualAlloc HeapCreate GetStdHandle SetHandleCount GetFileType GetStartupInfoA GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap MultiByteToWideChar LockResource LoadResource SizeofResource FindResourceW WriteFile CreateFileA GetModuleFileNameA GetTempPathA GetModuleHandleA TerminateProcess CreateThread CreateEventW DeleteFileW GetSystemDirectoryW GetTempPathW OpenEventW GetFileAttributesW GetTickCount ExitProcess Sleep GetModuleFileNameW GetCurrentProcessId GetCurrentProcess CloseHandle GetVersionExW GetProcAddress LoadLibraryW GetModuleHandleW DeleteCriticalSection GetLastError

user32

SetWindowTextW ClientToScreen DestroyMenu TabbedTextOutW DrawTextW DrawTextExW GrayStringW GetForegroundWindow GetDlgItem GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetClientRect PostMessageW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx GetDlgCtrlID CallWindowProcW CopyRect PtInRect GetMenu SetWindowLongW SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW EnableMenuItem CheckMenuItem GetWindowTextW GetSystemMetrics GetDC ReleaseDC GetSysColor GetSysColorBrush SetWindowsHookExW CallNextHookEx GetKeyState PeekMessageW ValidateRect GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetWindowThreadProcessId SendMessageW GetParent GetWindowLongW GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxW UnhookWindowsHookEx LoadStringW LoadAcceleratorsW DispatchMessageW LoadIconW LoadCursorW RegisterClassExW CreateWindowExW DialogBoxParamW DestroyWindow DefWindowProcW BeginPaint EndPaint PostQuitMessage EndDialog wsprintfW RegisterWindowMessageW WinHelpW GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW IsWindow GetFocus

advapi32

RegQueryValueExW RegCloseKey RegSetValueExW RegOpenKeyExW

shell32

ShellExecuteA ShellExecuteW

ws2_32

gethostbyaddr socket gethostbyname WSAStartup htonl WSAGetLastError recv send closesocket connect htons inet_addr

iphlpapi

GetAdaptersInfo

wtsapi32

WTSRegisterSessionNotification WTSUnRegisterSessionNotification

oleacc

LresultFromObject CreateStdAccessibleObject

gdi32

DeleteDC GetStockObject TextOutW PtVisible ScaleWindowExtEx SetWindowExtEx CreateBitmap GetClipBox SetTextColor SetBkColor DeleteObject ExtTextOutW SaveDC RestoreDC ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx RectVisible SetViewportOrgEx SelectObject Escape GetDeviceCaps SetMapMode

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

oleaut32

VariantClear VariantChangeType VariantInit