Behavioral task
behavioral1
Sample
0180decb30ec5d3934893c90995b2aca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0180decb30ec5d3934893c90995b2aca.exe
Resource
win10v2004-20221111-en
General
-
Target
0180decb30ec5d3934893c90995b2aca
-
Size
118KB
-
MD5
3c1dfa79853ff35edbeea726aab5973b
-
SHA1
3cd25a3e1cd56ddf2a94ea4a2838272830785318
-
SHA256
90cd59c68786051a318d8ba3371ac0607d13d7e00e1c982a2dfb68b5019f9eda
-
SHA512
819874fc043e298b42792b05170a6cceaa0f0925f544af90afbc2ea599d4d52b642044de24ab76320d62fe3b06918c7de2a0750258a5613405c70e50f6b88626
-
SSDEEP
1536:H+p+iPNAL0z81YHKDgnkt9tMDyC+9BDYz39:HOvFRCgkIDyt9BDk39
Malware Config
Extracted
purecrypter
http://justnormalsite.ddns.net/SystemEnv/uploads/nodeffender_Veiwqhsq.jpg
Signatures
-
Purecrypter family
Files
-
0180decb30ec5d3934893c90995b2aca.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ