Extracted

• • Target

    d15f617990f885f9515799df483b1b73_JaffaCakes118

  • Size

    542KB

  • MD5

    d15f617990f885f9515799df483b1b73

  • SHA1

    d3039e77018e0933ab186b7efbba68b9f5377cb0

  • SHA256

    ad7c6de586f42baec3de2fd0ecbcf009884bc60f607feec861544e518ca85b2f

  • SHA512

    a44048023621deae1df944d55c4166d480037735821c2dc9567e068fa7087f3bf7b1e849682939fdd7f1cf2b769622d7b051b59c5d2390b885c0663206aeeb50

  • SSDEEP

    12288:T52PxDgZo3ijnieactYDG7MzZSHJcvEj8dmoSxuC:92SLi70T7MifjB

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2