Behavioral task
behavioral1
Sample
PO_JD09220000_Conmetall GmbH & Co.KG.scr.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
PO_JD09220000_Conmetall GmbH & Co.KG.scr.exe
Resource
win10v2004-20220812-en
General
-
Target
PO_JD09220000_Conmetall GmbH & Co.KG.scr.exe
-
Size
44KB
-
MD5
8e2cabf6bf109fb67984d1a6ee32d36e
-
SHA1
5bd0dfa5e39b3e92258969d0e3b97c4e508fa2f0
-
SHA256
98d78baf7a1ceff6ec4f3d2330a30075df9c461d03ceaac23c478112bb333d48
-
SHA512
19e8b995ad8cf1765f91c0131d889bee405ff68b8d9997d9c7d4b539b17d1d04d699274e1e7b8be2ddfd3f705106db25cfedf7eaec438105ea28feb8a36e9159
-
SSDEEP
192:c554hLbqpP60GOMLwU4JCSYx8tfMHHoYYwOJ4eZAEdKdO58rP4Ggi47saXCBeOO+:c55SLbqV5g4G8tUHHojSe7i29JXYamT
Malware Config
Extracted
purecrypter
https://cesarsoriano.pe/wp-content/uploads/Estfqtbyf.dll
Signatures
-
Purecrypter family
Files
-
PO_JD09220000_Conmetall GmbH & Co.KG.scr.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ