Behavioral task
behavioral1
Sample
三月命令 #4749HD-3DH2D-AN1A3-ZNTL3-CBU49-1ZMT40-24HAN-4910CK-3801Y-RA271.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
三月命令 #4749HD-3DH2D-AN1A3-ZNTL3-CBU49-1ZMT40-24HAN-4910CK-3801Y-RA271.exe
Resource
win10v2004-20230220-en
General
-
Target
三月命令 #4749HD-3DH2D-AN1A3-ZNTL3-CBU49-1ZMT40-24HAN-4910CK-3801Y-RA271.exe
-
Size
11KB
-
MD5
f9bad6152f4986cb01d7701bfc99f7c8
-
SHA1
10543402cde89a96ad400bc1fe048dd7a854ec99
-
SHA256
8e82fb037b606bf25cf55bd40d74105ad0e38d7b3cfa85c6de48babb3dde7bfe
-
SHA512
8a136790d114acb1506d626e9e84dc721ff50ffa7c333d1bf3ab0de92196036679b0c177252b615ad204e3d5756ad17c71bb82a31363c0f5926fe765f463023a
-
SSDEEP
96:ZBtYEMHtebFX9q8nLkobKtRZYsYE7KkztSlAtUqUriBha3dWraqUQUCnhQDOzNt:ZVpX9qoL/bYTYfwzHtR8iBLXBnhQDI
Malware Config
Extracted
purecrypter
http://vinosbiodinamicos.com/Mugkiaa.dat
Signatures
-
Purecrypter family
Files
-
三月命令 #4749HD-3DH2D-AN1A3-ZNTL3-CBU49-1ZMT40-24HAN-4910CK-3801Y-RA271.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ