urelas | d9f59d6ca5ea63939c323c38adc441f19dd4b1eb1a38bcce49fe734244ed5182[.]exe | Triage

Sharing

General

Target

d9f59d6ca5ea63939c323c38adc441f19dd4b1eb1a38bcce49fe734244ed5182.exe
Size

138KB
MD5

e71019797add3a8cefe684ddc98bfe4b
SHA1

62c3cc9c37856b9b257ad719e8db4dc616900adc
SHA256

d9f59d6ca5ea63939c323c38adc441f19dd4b1eb1a38bcce49fe734244ed5182
SHA512

2974d8e3f201b18b3a0c2de6f18daa6e23f257685fca8238fa0f8119e574c6ab2e32eff607cb03ee127ef0fbb827c4a16fd075b36aa337b74db8053f8eb42010
SSDEEP

1536:pdcGogyTSvuuCu4cOK2y8uOZBkWdB2dsLjBS3+ZVkU2g/cmEyokjzw:p25gy6uuyXMdsLjs+vnc2okjE

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9f59d6ca5ea63939c323c38adc441f19dd4b1eb1a38bcce49fe734244ed5182.exe

Files

d9f59d6ca5ea63939c323c38adc441f19dd4b1eb1a38bcce49fe734244ed5182.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HHUIJDSI
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE