Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
6ad71236a8807687b670fe635f799ad2f811d88e9f7d8075d3df4cafeb1cbd45.exe
Resource
win10-20220812-en
General
-
Target
6ad71236a8807687b670fe635f799ad2f811d88e9f7d8075d3df4cafeb1cbd45
-
Size
171KB
-
MD5
97570f2445b1ecd08dd0619717c2a3eb
-
SHA1
321697b118fed0d76d6ad87ddbcedce34e00b641
-
SHA256
6ad71236a8807687b670fe635f799ad2f811d88e9f7d8075d3df4cafeb1cbd45
-
SHA512
a06b7858a1c60f7d61c5629a84a00fba8f8a4d07ac780f597d0303c921b5c5df1371bf476f4a3456460ffb76b7c13516e6eba7775c638d060116d319ed8b962d
-
SSDEEP
1536:oyj17c9URWzKr7PhuuUpV7+5JTiy95UuUCQahsf5mZIWiwwr7QXsouW2ASDDA6rQ:9j17pWaxa7Dy956S2j4xnsvXtPdSae1
Malware Config
Extracted
purecrypter
http://163.123.142.210/Dzsifrcw.dll
Signatures
-
Purecrypter family
Files
-
6ad71236a8807687b670fe635f799ad2f811d88e9f7d8075d3df4cafeb1cbd45.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ