purecrypter | Tseph[.]dll | Triage

Resubmissions

23-06-2022 15:45

220623-s676asdghj 10

28-01-2022 16:14

220128-tpt3saggc7 1

Sharing

General

Target

Tseph.dll
Size

284KB
MD5

6f96295c145acb915f0b42733dc45b44
SHA1

232873f89ceaf5a2b3948a8138245111b00a7e1a
SHA256

fe58ae232f7ea569b42d7bb1883f70911ca89900c9783252e965f77e617c508d
SHA512

e058cee392c51eeefd5a6175f2b978d33bf5e82bad37a634cedca0a63d11b08a4c613f6d4e984879cf33d719af3d7f02a929d3359b8272406d92b0b5cd35ee2a
SSDEEP

6144:En4Anu4THEkbyaVbn5zifYchI/09Z6E4me4zhGUpKrlpmuxzkh0KKw3Zd:pAn7k3Ck/u414mTzhGt7mMkh0K3

Score

10^/10

loader purecrypter

Malware Config

Signatures

Detect PureCrypter loader 1 IoCs

resource	yara_rule
sample	family_purecrypter

Purecrypter family
purecrypter

Files

Tseph.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ