Behavioral task
behavioral1
Sample
Purecrypter3_browsing7Exe_2.exe.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Purecrypter3_browsing7Exe_2.exe.dll
Resource
win10v2004-20230703-en
General
-
Target
Purecrypter3_browsing7Exe_2.exe.dll
-
Size
297KB
-
MD5
aaa4a65d44e5a0f4d1af7e7bc8477cef
-
SHA1
666dfaf2274f2d767634b4809db27696f39d21e2
-
SHA256
1d154a37cd713680bf7fb3d6ecac3873e948d8aa6a92d8c2b9303fe288528054
-
SHA512
78f83c18b6b995508ba3400fd5f19f543b630ba441cdca9a653d785abfb33504249fd68608c12dd5ba597c04834cf0dc672c41650615eb05adf1e808253355cb
-
SSDEEP
6144:Arq3l4XGTzKIKybSLowT2SFYqwd5H0ufXvzdwjojhB:A0FvKpUYI5Hh/vhwjojhB
Malware Config
Signatures
-
Detect PureCrypter injector 1 IoCs
resource yara_rule sample family_purecrypter -
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Purecrypter3_browsing7Exe_2.exe.dll
Files
-
Purecrypter3_browsing7Exe_2.exe.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 910B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ