Behavioral task
behavioral1
Sample
deliver.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
deliver.exe
Resource
win10v2004-20220812-en
General
-
Target
deliver.exe
-
Size
172KB
-
MD5
6f97a3f9d8c88ac5ba01fccf033a66aa
-
SHA1
5152b20ec9d63e9decb5a17ae652ebd105ce0a24
-
SHA256
1501ed409db46bc33f3f4a13c9d2150308597fb91cff20e04c9df0d5f3dec37d
-
SHA512
a6c3afda108f973a0a4d424db289726c5ee0a46c88030e9354ffa639e81e03a6c4209dbfef4d0c384e919a7a904d4c15feef8e33057017f6a62843362640bdcb
-
SSDEEP
1536:pc9URWzKr7PhuuUpV7+5JTiy95UuUCQahsf5mZIWiwwr7QXsouW2ASDDA6rRcC+R:ppWaxa7Dy956S2j4xnsvXtPdSae1
Malware Config
Extracted
purecrypter
http://163.123.142.210/Twpowpijhqf.dat
Signatures
-
Purecrypter family
Files
-
deliver.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ