Behavioral task
behavioral1
Sample
77f8776ee4a055a4081031422e05ba28187c0b1d36cf51179e4404827f44f4bb.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
77f8776ee4a055a4081031422e05ba28187c0b1d36cf51179e4404827f44f4bb.exe
Resource
win10v2004-20230220-en
General
-
Target
77f8776ee4a055a4081031422e05ba28187c0b1d36cf51179e4404827f44f4bb
-
Size
10KB
-
MD5
d3e70075e586bd1d459813067a440584
-
SHA1
971b00bf0990a1d00e9cc2566cc4758cf3663a79
-
SHA256
77f8776ee4a055a4081031422e05ba28187c0b1d36cf51179e4404827f44f4bb
-
SHA512
340808d0d2fd3bed5944a8c953a0718faea8eec1c3182b87832cf7773bb521cfef00fad23099afdb316d5ed3e9f558d34181959909f39ce3174de4b29228c7cf
-
SSDEEP
192:A7l3PUnLIVHfzh2jnFk+8stYcFmVc03KY:+wLIpfzAFk+ptYcFmVc03K
Malware Config
Extracted
purecrypter
https://cents-ability.org/loader/uploads/noicon_Qkchgtfr.png
Signatures
-
Purecrypter family
Files
-
77f8776ee4a055a4081031422e05ba28187c0b1d36cf51179e4404827f44f4bb.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ