Behavioral task
behavioral1
Sample
Bxbnmjpq.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Bxbnmjpq.exe
Resource
win10v2004-20230703-en
General
-
Target
Bxbnmjpq.exe
-
Size
80KB
-
MD5
6ea65106bdd4ab1148028f83956336d1
-
SHA1
a1e0b3255718cd3478e6a585305427a8f2f3133d
-
SHA256
c599bebc9ae54a54710008042361293d71475e5fbe8f0cbaceb6ee4565a72015
-
SHA512
f0968062f384b2760d1f6f0189a70d6adefe2ca5162c6acffb64c351d7dbd0da0db00e56fa4c7ca9cb94f9b6b98ef732593412b6e1e23799aa06b7e394b2c95a
-
SSDEEP
1536:YnJZzZ0+yQaiu6BkuUIbppIHI+CwthPLO3QeDfI:+Dt0+Faiu6BkuUIbppIHI+Cwt5LOgSfI
Malware Config
Extracted
purecrypter
http://80.66.75.37/a-Xmifagl.dll
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Bxbnmjpq.exe
Files
-
Bxbnmjpq.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ