Extracted

• • Target

    7b1919a339b90ce449c8ce28192132a3_JaffaCakes118

  • Size

    544KB

  • MD5

    7b1919a339b90ce449c8ce28192132a3

  • SHA1

    51b8edafbe4ad97d2e4c46f8ca181163355d355d

  • SHA256

    37d04ad73f17306a88db9ac0a98a3de75da26c09996160f32de855eb8efced8f

  • SHA512

    a363fc42f68b27d6c53af747aeafdea28f18671a6b9430903329b47aac8c5e86b21e1fcbd5f7cc6fe795c2368b2d44cdfb587bbfb597493c4c93fcd2f4b89757

  • SSDEEP

    12288:T52PxDgZo3ijnieactYDG7MzZSHJcvEj8dmoSxum:92SLi70T7MifjT

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2