purecrypter | LibCADPortable_2_1_4[.]ex | Triage

Resubmissions

23-06-2022 15:45

220623-s7gdzagef7 10

29-03-2022 19:44

220329-yft4mseegk 1

Sharing

General

Target

LibCADPortable_2_1_4.ex
Size

583KB
MD5

b97fe7b86ce93ffd22457d4421989dc2
SHA1

ea28af8034917dc24f5a7ba72dbd428fea2127f2
SHA256

40be095c396242bea434840750a4043e27da991fd780d1226037810c6a7ad949
SHA512

537e5facd80bf84ed3068d0d49a3426924c00c6d18fa8811347b355ccc677d0999833b8d6bd04bcf17eb239869e7775d662b37b490bd47f3dd66a781b3d3b2d1
SSDEEP

12288:4xlh2gxtB4JhbylWGCCtkJIUJuoRxcEVB98OZ/axVIAEetP9darcfS1:4xX2OtB4jylcIU8oR1zrKuetPztfK

Score

10^/10

loader purecrypter

Malware Config

Signatures

Detect PureCrypter loader 1 IoCs

resource	yara_rule
sample	family_purecrypter

Purecrypter family
purecrypter

Files

LibCADPortable_2_1_4.ex
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 581KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ