Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.MSIL_Kryptik.HJS.gen.Eldorado.12185.30777.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.MSIL_Kryptik.HJS.gen.Eldorado.12185.30777.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.W32.MSIL_Kryptik.HJS.gen.Eldorado.12185.30777.exe
-
Size
19KB
-
MD5
fdf1d0cdbeea64ca6a6eba7f0fac58a7
-
SHA1
bd693b28de6f687c3a713f2e4ff58b39e2c6560d
-
SHA256
d9790b25df3e792b4af4dbda1962f7bfb884eb3491f68db19249061b8441a126
-
SHA512
4c3d0b0d124a5a9b7f04d482bfaab326c66f4e5ab5dbeec5d34825553b0e0a88c0ea20b3f357cb8f1cfccea817f682c94ce038633e9a66216b889fd6d42f4e45
-
SSDEEP
384:8KO55Uim6ebuC8cOkd4gvbH3R9BuG2hJntugTnwqKfq:mvUizeKC8xgvLtKJMmwqB
Malware Config
Extracted
purecrypter
https://files.catbox.moe/ecnmhc.mp4
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.MSIL_Kryptik.HJS.gen.Eldorado.12185.30777.exe
Files
-
SecuriteInfo.com.W32.MSIL_Kryptik.HJS.gen.Eldorado.12185.30777.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ