Static task
static1
Behavioral task
behavioral1
Sample
pureland.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
pureland.exe
Resource
win10v2004-20230221-en
General
-
Target
pureland.exe
-
Size
265KB
-
MD5
a1a2935b1e618d810a60a222d649e3c6
-
SHA1
d6323118969c70e046e9d76df2cab9c495a19c1a
-
SHA256
b9fc13ce9933a6b09f4d458d876b1dffc29d9f07a6d3c986d29c772207043c05
-
SHA512
11a4e3384c7efe5b83f48e65dce8260d5ea31e599c1ce31bc6eb38893a3f2754a7c94025569c0187b2351abd52796e6777a708d83dadf65736c168e28a79fe0d
-
SSDEEP
6144:xXajEvq61XgAroVU8KDEzPl/ocWCcYMOydU7rvNZHtisOM9:xuEv7XgArW0Ep/JQjHU7JttisZ
Malware Config
Signatures
Files
-
pureland.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ