purecrypter | 28d54c2eca152e4b9724f8c1f4a4ac81[.]dll | Triage

Sharing

General

Target

28d54c2eca152e4b9724f8c1f4a4ac81.dll
Size

2.5MB
MD5

f383d1763dcdc1e2067ceb0a8a991e4c
SHA1

65a5ed134615d4b67c058776f65379d0d7f0b124
SHA256

7807253caffdfc2273c16860e7bf893d835d9ce2c2c2dd65f4af9552e8e2e398
SHA512

b65dd594c001fefa4b9a875ec3fb04ae6b1d41b46c68c9e7ae0bce60dfa1bab6a34ccccb383e88b408ea950439ebea4e26b51feba61ccd8ee313ccd59e51e1cd
SSDEEP

49152:aZ7qZPNQEcqo5Ay5sQSR4cJ6beTLH9gAG:glEAiHeQL

Score

10^/10

loader purecrypter

Malware Config

Signatures

Detect PureCrypter injector 1 IoCs

resource	yara_rule
sample	family_purecrypter

Purecrypter family
purecrypter

Files

28d54c2eca152e4b9724f8c1f4a4ac81.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ