Behavioral task
behavioral1
Sample
e1614217a227ee00d452c21059af1d4572420cd6079d384ec265e2b1a5192f90.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e1614217a227ee00d452c21059af1d4572420cd6079d384ec265e2b1a5192f90.exe
Resource
win10v2004-20221111-en
General
-
Target
e1614217a227ee00d452c21059af1d4572420cd6079d384ec265e2b1a5192f90
-
Size
41KB
-
MD5
ab4a6ddfc90f2d379d70d0fad747f6e5
-
SHA1
87ac21f928c9f4e3d76cc6ea110b6133defd8507
-
SHA256
e1614217a227ee00d452c21059af1d4572420cd6079d384ec265e2b1a5192f90
-
SHA512
d0512d9629ffe3feee10f8f6bfa5419f97e1da78e7972866f76270326657b5760cc3bb3c594fe4ebbbb22571429f0fe88a007f75991db39136d22ff8dd274815
-
SSDEEP
768:ppoHKflwYtttWtYtYBtYtxqGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGGGGGGUu8y:DoHFGGGGGGGGHGGGGGGGGGGGGGGGGGGH
Malware Config
Extracted
purecrypter
http://163.123.142.210/Zhevuwz.dat
Signatures
-
Purecrypter family
Files
-
e1614217a227ee00d452c21059af1d4572420cd6079d384ec265e2b1a5192f90.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ