Extracted

• • Target

    e58baeaf725a67cb6ccf0354f099a20d_JaffaCakes118

  • Size

    542KB

  • MD5

    e58baeaf725a67cb6ccf0354f099a20d

  • SHA1

    fdf7d23a54eac4cce96018548dc6e6a7506a8b8d

  • SHA256

    853839becd3724db65dd63c1eddf16aee5c35303e66798057baaf62f1b769996

  • SHA512

    b7530cb9297e71000d8d2e828dfbcee108999ffbc2dcc04d1bdadd6cf685740d585968a2b6c54627cdbe5794f3a0891e66456625bb9e0d31a281ca936b5b422f

  • SSDEEP

    12288:T52PxDgZo3ijnieactYDG7MzZSHJcvEj8dmoSxuH:92SLi70T7MifjA

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2