Extracted

• • Target

    561a95ffb3e0d0e861a4684d71a88fc5_JaffaCakes118

  • Size

    466KB

  • MD5

    561a95ffb3e0d0e861a4684d71a88fc5

  • SHA1

    ccaeb389306819e18d7d82a45bc41d8ce911e5b1

  • SHA256

    9ae117c42a179845df8e1dbc3f6a9be045299affe507e01d258b1abf5d3993e8

  • SHA512

    4d1718c1f76a09f22d43c6f930646bb84c3c4364b297e85d9b2c8962695456fc37f3e84b4dfdcc89a68e787e1bfa3c72112897eede044cfd6586f2f12d496e17

  • SSDEEP

    12288:m6twjLHj/8/GcHUIdPPzEmvTnabAh0ZnAr1UG:m6tQCG0UUPzEkTn4AC1+t

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2