Behavioral task
behavioral1
Sample
77b72d9e11b5b61983903918dfb822e8c6c1e3a4acd6a5fde5db7a3cf004b445.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
77b72d9e11b5b61983903918dfb822e8c6c1e3a4acd6a5fde5db7a3cf004b445.exe
Resource
win10v2004-20230220-en
General
-
Target
e034dcab67a1ef7eb1f65347439ed212.bin
-
Size
19KB
-
MD5
59655cb9564f7b8f41a431d51522479f
-
SHA1
5395ab9d74a70dfe1541b8bc05c9aee7b73984fb
-
SHA256
b0aace6843e2fe064c6b22f99851ada2764789d620c92e6faa74b47ded3dae5f
-
SHA512
b9401c7acc311d8822ad96c3989fb8c74a107669cbc756e80a0864875adfcbc3012a09a760ac0e2ce54c1cc375740122ddae293466164f4e0feb1c1ea02b4943
-
SSDEEP
384:kUYPgAVl+CosDDQ/VgbyIpTuO4pXoAEpiAcnh2H5cGjGz/qKp20X8UPXS:kZPgarb0/VqyIpr4toAEcA6hsfTi/XS
Malware Config
Extracted
purecrypter
http://208.67.107.146/Xvhwgnaxcaj.png
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/77b72d9e11b5b61983903918dfb822e8c6c1e3a4acd6a5fde5db7a3cf004b445.exe
Files
-
e034dcab67a1ef7eb1f65347439ed212.bin.zip
Password: infected
-
77b72d9e11b5b61983903918dfb822e8c6c1e3a4acd6a5fde5db7a3cf004b445.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ