purecrypter | Nmzquuiantsnzvtelvd[.]dll | Triage

Sharing

General

Target

Nmzquuiantsnzvtelvd.dll
Size

2.4MB
MD5

10f35d34423fc1e5da07799c25be8861
SHA1

dc160b11e3e5bd56a7f787f96f900c65c37b24f0
SHA256

695e7e6b183b7b57c8b7113cb2d771a44e33d8d8158b2c74bbd9e71ddb860699
SHA512

3190423d0871c2b5ca1c1d14c9b5290476d3c498ec574d0b7d15c41a889f3a7f872fd44129b31585ec21ccf9305f9905a6b94d3d95cca8428bec95eee37785ce
SSDEEP

49152:gmRA663TbtnUrttILB5QqzK7QjcfJg/pQjF:oTbtnIteTzjcfu/O5

Score

10^/10

loader purecrypter

Malware Config

Signatures

Detect PureCrypter injector 1 IoCs

resource	yara_rule
sample	family_purecrypter

Purecrypter family
purecrypter

Files

Nmzquuiantsnzvtelvd.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ