Static task
static1
Behavioral task
behavioral1
Sample
https___radio-hit.ro_FEB2.png.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
https___radio-hit.ro_FEB2.png.dll
Resource
win10v2004-20220414-en
General
-
Target
https___radio-hit.ro_FEB2.png.rev
-
Size
342KB
-
MD5
6bf33ae2be20f38e766bfc4067a5bb14
-
SHA1
eafd9b75f4db49e8fd2e4f63724b1bcbad84f3d2
-
SHA256
678376204602f3d60d11725b0f62d125caa65b22200ec282e0806e055a9b59ea
-
SHA512
25e8ff0b093b1b853f2eeea91eba0dd8d94b6f5d45e2468ea63e118f82abc9c62b041d03a0cbcf94d6e927969dd510c7520ea1076016b96d9cb6373101f62fe0
-
SSDEEP
6144:SbLmvOFvbNXNcs8ob3YO8uqK1suUKW+LiBgZN4gT0irRi/Uvp:S2CB+s8obZ2K1s7V+LimHwirzvp
Malware Config
Signatures
-
Detect PureCrypter loader 1 IoCs
Processes:
resource yara_rule sample family_purecrypter -
Purecrypter family
Files
-
https___radio-hit.ro_FEB2.png.rev.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 862B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ