Behavioral task
behavioral1
Sample
TTRES322023.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TTRES322023.exe
Resource
win10v2004-20230220-en
General
-
Target
TTRES322023.exe
-
Size
6KB
-
MD5
f85feb08f3741cdf99507d8d961abf1d
-
SHA1
affada16c452478d79c9b356b0fcedf1b0032b4f
-
SHA256
11b0042c974567450ce2895c15455f58ead4f9b80d73c79b395db7f0a8bf9fd9
-
SHA512
972c59140fa0a61858d81b0dd7bf50ea6ec0b85faa1d7b50c2c6dd52c8b2eb0274fe666124f7879b5b2f1b4fc1aed9e4a76a820cd6aa720ad981af0a98dca727
-
SSDEEP
96:N2uEMz82IfnbA2yrLP3ZI5RZQDwKAu7dkTQiLzNt:NpkfnbA7LPZWTWwKaT5N
Malware Config
Extracted
purecrypter
http://85.31.45.42/Vsrhv.dat
Signatures
-
Purecrypter family
Files
-
TTRES322023.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ