Static task
static1
Behavioral task
behavioral1
Sample
LibCADPortable_2_1_4.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
LibCADPortable_2_1_4.dll
Resource
win10v2004-20220414-en
General
-
Target
LibCADPortable_2_1_4.ex
-
Size
583KB
-
MD5
b97fe7b86ce93ffd22457d4421989dc2
-
SHA1
ea28af8034917dc24f5a7ba72dbd428fea2127f2
-
SHA256
40be095c396242bea434840750a4043e27da991fd780d1226037810c6a7ad949
-
SHA512
537e5facd80bf84ed3068d0d49a3426924c00c6d18fa8811347b355ccc677d0999833b8d6bd04bcf17eb239869e7775d662b37b490bd47f3dd66a781b3d3b2d1
-
SSDEEP
12288:4xlh2gxtB4JhbylWGCCtkJIUJuoRxcEVB98OZ/axVIAEetP9darcfS1:4xX2OtB4jylcIU8oR1zrKuetPztfK
Malware Config
Signatures
-
Detect PureCrypter loader 1 IoCs
Processes:
resource yara_rule sample family_purecrypter -
Purecrypter family
Files
-
LibCADPortable_2_1_4.ex.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 581KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ