Behavioral task
behavioral1
Sample
57323d497d6f276933dbadb713060d68.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
57323d497d6f276933dbadb713060d68.exe
Resource
win10v2004-20221111-en
General
-
Target
57323d497d6f276933dbadb713060d68.exe
-
Size
41KB
-
MD5
57323d497d6f276933dbadb713060d68
-
SHA1
9c7fcdc8e464815c5348312dca6210bc567dcf0e
-
SHA256
cfc9e35e650fccb171caa30fd7db3f6b99a8a16e824fb3f6276526ff10e063cf
-
SHA512
2f92ebf3534de46624bfdf6c8d48851026836c0d36e58cc83449e7927396d658f6c82d37680eda8af79e338b4ba63774f334b5dd58d50c430fe71af2540f5340
-
SSDEEP
768:K6uflwYtttWtYtYBtYtxqGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGGGGGGUu8lXn:K6ZGGGGGGGGHGGGGGGGGGGGGGGGGGGGV
Malware Config
Extracted
purecrypter
http://185.106.94.146/Jgetwa.png
Signatures
-
Purecrypter family
Files
-
57323d497d6f276933dbadb713060d68.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ