Behavioral task
behavioral1
Sample
01a68fb30e8452e9d83c02f0fcba1086bd15855f7289e7ed23f6fecb29360b74.exe
Resource
win10v2004-20221111-en
General
-
Target
01a68fb30e8452e9d83c02f0fcba1086bd15855f7289e7ed23f6fecb29360b74
-
Size
6KB
-
MD5
102bcd3075e9ac5f4f0b94af5884c22e
-
SHA1
1091e0ccca98dbfc9a4c9da679afa93b886aeeeb
-
SHA256
01a68fb30e8452e9d83c02f0fcba1086bd15855f7289e7ed23f6fecb29360b74
-
SHA512
c33a5511eb4c262d1a13f09d7057773adc8b1500a3149d49c4d3fd6d50cd61c4eb75df8f06489e02eec43aa1ace7a3dc36de4b134cf3ec81a753769abaed79da
-
SSDEEP
96:EyrsU9DOzDO3+LcgR9htkwF1ccDkw0thG93ozNt:dUD5LcwsFmq
Malware Config
Extracted
purecrypter
http://cleaning.homesecuritypc.com/packages/Vmmvxe.png
Signatures
-
Purecrypter family
Files
-
01a68fb30e8452e9d83c02f0fcba1086bd15855f7289e7ed23f6fecb29360b74.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ