Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230221-en
General
-
Target
tmp
-
Size
7KB
-
MD5
45cd89fa28924bd2390d6948d1ee11f6
-
SHA1
75110b387762c2f59116fef0709d2a5d23e13c2d
-
SHA256
13df95cc4f92ffd056e353d26493f69b53667970de247808b7f1e2de95dae364
-
SHA512
1e24fb83b702eb66f5d4fe8df2ff761d42c5fb44ff7bca0342a9d0b0055f0493b6e1b0686d733878ee6172ff73ab64d50750a0f2f88822a77f088e4c0f0fc6d9
-
SSDEEP
96:UoFQgbeMBVLPCyWUyxtL9UvpvR5IMvW+7f7LEkQWQQCjzNt:UoFhyMfyxtL+tfhvfLtZQpl
Malware Config
Extracted
purecrypter
https://naadhira.store/panel/uploads/services_Cuepxqhr.jpg
Signatures
-
Purecrypter family
Files
-
tmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ