Behavioral task
behavioral1
Sample
1c6e612cecab7fdc8d3389c1e88f795d85ef1d08646ec0c3ded43fbb6577a34e.exe
Resource
win10v2004-20230220-en
General
-
Target
1c6e612cecab7fdc8d3389c1e88f795d85ef1d08646ec0c3ded43fbb6577a34e
-
Size
8KB
-
MD5
39c5e1e87aa30c1628eec3e2ab9a6b07
-
SHA1
f2fd910454ba7aaf8d482ad1bfd9ace32e612e8c
-
SHA256
1c6e612cecab7fdc8d3389c1e88f795d85ef1d08646ec0c3ded43fbb6577a34e
-
SHA512
414bd6bcfac34fb5980c43d0ccf731568d5c29deca1d63c77bc1641f954df54ef92fcf024813fb97589562b07c6081864ea6d7d0315b73f01bd67c93368c924a
-
SSDEEP
192:viovIB+jqlfX0lvb2cvqFH/dJLmbVVnrKqJWKgWXi:vi8+AqlfMvi4qp/dJLmbH7WKgWS
Malware Config
Extracted
purecrypter
http://cleaning.homesecuritypc.com/packages/Beqivfwbch.bmp
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c6e612cecab7fdc8d3389c1e88f795d85ef1d08646ec0c3ded43fbb6577a34e
Files
-
1c6e612cecab7fdc8d3389c1e88f795d85ef1d08646ec0c3ded43fbb6577a34e.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ