Behavioral task
behavioral1
Sample
47fb3f47c7d8d30d6bc605805e10fa9c60af5c0516b93e475c030da9144a715d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
47fb3f47c7d8d30d6bc605805e10fa9c60af5c0516b93e475c030da9144a715d.exe
Resource
win10v2004-20230220-en
General
-
Target
47fb3f47c7d8d30d6bc605805e10fa9c60af5c0516b93e475c030da9144a715d.exe
-
Size
23KB
-
MD5
4a5b45207512b2f4ee3bd8cd7a25ba9e
-
SHA1
2700be565b25a627c86adf20798e90e99958a3ea
-
SHA256
47fb3f47c7d8d30d6bc605805e10fa9c60af5c0516b93e475c030da9144a715d
-
SHA512
a1e26da024c534083fde7dee2846973489ceb06c536a751bde47fa74977efe5ab3762bd8f82bc427800eb43ee9e56064dcbd755d00454c2be112cdd04eb2e4ce
-
SSDEEP
384:YbrFmwPzQHzVZJq/S8frSo62tCT+UuSvwiFawG:Ah2HzIfrS8fiFa/
Malware Config
Extracted
purecrypter
https://onedrive.live.com/download?cid=BD9480D014FE52E5&resid=BD9480D014FE52E5%21385&authkey=AB7WYGSbxFgcTyw
Signatures
-
Purecrypter family
Files
-
47fb3f47c7d8d30d6bc605805e10fa9c60af5c0516b93e475c030da9144a715d.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ