Behavioral task
behavioral1
Sample
c5f6cf32d9df0a56c7d66679b0c9f92d83e3f72bd7ff381aa58017b7eb478d9c.exe
Resource
win10v2004-20221111-en
General
-
Target
c5f6cf32d9df0a56c7d66679b0c9f92d83e3f72bd7ff381aa58017b7eb478d9c
-
Size
6KB
-
MD5
87cc744ba0415d7bf876f8a757d71579
-
SHA1
a244571fc128820b1c98be6931b60363c804206a
-
SHA256
c5f6cf32d9df0a56c7d66679b0c9f92d83e3f72bd7ff381aa58017b7eb478d9c
-
SHA512
fb5a3af854390e9f3e8b89436f94bb310caa5d410ea78c26cbfcd6be2f2c6b69b85b862e59dc2335951b1ee2aaaa22f8095c24093201a900972c32cb4c6d3903
-
SSDEEP
96:nmTGjilvkQHL0dKLAiU+7VJS1Ektt593ozNt:nmiiPr0QLArGqt9q
Malware Config
Extracted
purecrypter
http://cleaning.homesecuritypc.com/packages/Tncaifoffyw.png
Signatures
-
Purecrypter family
Files
-
c5f6cf32d9df0a56c7d66679b0c9f92d83e3f72bd7ff381aa58017b7eb478d9c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ