purecrypter | file | Triage

Sharing

General

Target

file
Size

1.2MB
MD5

09630bba99a5d96a0212a1c43089e0d5
SHA1

e28f16ec2e8ccebbb6e5af67c606e18b712bfd22
SHA256

5371dcbe437250016f876cab055a5cd0b445644b2f937030c1c23d59c1a84613
SHA512

454beaeb6720421c16f35e5cff7c26355c961ad8a3c1cfc99d0168985f87738f13a0ab9d8f22a46790bedb7edcc245d5c845bc984c747b90a29e58a368bf227b
SSDEEP

24576:gA+aaa/FCt17bad4u09YLvPp3fIX2fAPCW+IkS8kVEKxlF865OPHiAFoxEA05A:zz/FscDWkvPdf0JB+YNSM/OIEA7

Score

10^/10

loader purecrypter

Malware Config

Signatures

Detect PureCrypter injector 1 IoCs

resource	yara_rule
static1/unpack001/sample	family_purecrypter

Purecrypter family
purecrypter

Files

file
.gz
sample
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ