Behavioral task
behavioral1
Sample
1c35533679377e4109f5e79004ab6e92c45c0c65c2c5e779bf2be1315f271ee3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1c35533679377e4109f5e79004ab6e92c45c0c65c2c5e779bf2be1315f271ee3.exe
Resource
win10v2004-20230220-en
General
-
Target
1c35533679377e4109f5e79004ab6e92c45c0c65c2c5e779bf2be1315f271ee3
-
Size
73KB
-
MD5
2499343e00b0855882284e37bf0fa327
-
SHA1
c2a0423639ed2031855848b975b8d72fc280d3c4
-
SHA256
1c35533679377e4109f5e79004ab6e92c45c0c65c2c5e779bf2be1315f271ee3
-
SHA512
f2a2098a479fb689fadc56489d58fb23799d6ea919878b9d3d2d9191ce7b36f337e7a485cf95dd67dfd9f1a8a0402478d952676f39313b039b2d16ec0f47aec8
-
SSDEEP
192:bHaw9pLdykY/P6/QOpSFIaMD43333333333333333IP33333333333333333333s:bHHpLdykOSf+zILEQA3Hus5rD/XgKy2
Malware Config
Extracted
purecrypter
https://cents-ability.org/loader/uploads/withoutstartup_Mgvedmuk.png
Signatures
-
Purecrypter family
Files
-
1c35533679377e4109f5e79004ab6e92c45c0c65c2c5e779bf2be1315f271ee3.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ