Extracted

• • Target

    600b82e86ebd5721f4e5e434646418ea_JaffaCakes118

  • Size

    556KB

  • MD5

    600b82e86ebd5721f4e5e434646418ea

  • SHA1

    07f0d32fb7576ec92d16e3140dcebed68adf87f1

  • SHA256

    6446734456c209df3cf8a4f10279a8d33d6ae60d11bc03636891e7c63febfa78

  • SHA512

    cc55040fda4ecca23bc342cea09c453f99f29ac7297d7790fdc34d9dc2038d5a1aadbcf5c5e64b864bb402c6850b5862d8b3de73f291533589a33cb50434f0bf

  • SSDEEP

    12288:zccNvdRExZGe+Q1nSoS++43x+l7QLiaEyJ:znPfQp9L3olqFJ

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2