purecrypter | 87855d601e472d9d37e772e53029dacf[.]bin | Triage

Sharing

General

Target

87855d601e472d9d37e772e53029dacf.bin
Size

5KB
MD5

bf445e0ccd17fded9d9ec664a857ba23
SHA1

666588dab4c2eb4e13044799743bbb4bc7669fef
SHA256

b7f4d930e83a43424e0c3c5bb205c6ce4d7ae94a1d09add3bfe59bc68b74a75e
SHA512

b594195b07a5fe74426de1595ac75c868571678eb16f8d9ed4998cfadef7780bc1d534e1b255e840d71c2410b3d2b26704d10f1d5b0f4f277f87a4983bd80055
SSDEEP

96:xNa9oJZ4K9SFNDiwvUY4en29GIyNT9/1BtqPyrfMEcUM6DXIzsp7IcNay:rB7t9OF7IjyZqCkEEEespzT

Score

10^/10

purecrypter

Malware Config

Extracted

Family

purecrypter

C2

https://suad.group/Lypqx.mp3

Signatures

Purecrypter family
purecrypter

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/39b10e16dcda487ccf77695191c4c5e45d7e3b1ca85099f4bd934f260dc7ef62.exe

Files

87855d601e472d9d37e772e53029dacf.bin
.zip

Password: infected
39b10e16dcda487ccf77695191c4c5e45d7e3b1ca85099f4bd934f260dc7ef62.exe
.exe windows:4 windows x64 arch:x64

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ