Behavioral task
behavioral1
Sample
VirusShare_00fce918b5cf447876a61f05978b2db0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_00fce918b5cf447876a61f05978b2db0.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_00fce918b5cf447876a61f05978b2db0
-
Size
74KB
-
MD5
00fce918b5cf447876a61f05978b2db0
-
SHA1
6dec21de3d9d4584e2200a117e6edf70ecfd5c11
-
SHA256
73d66c77945f6ff7fe5d62a4ba5efd4bbc2f8459eaf4722833e0df6cfd4c6309
-
SHA512
31b0801ad232b746493c073527bf238b4d6bbc929313109222ac7a4625e831dcbbaaac973f6a0c0f825aef14432dcb8968b08676f27cef14914842561da59206
-
SSDEEP
1536:aheb4mzLMaM68hD0BLX/yYiAst6C4bllDp7kXqXPtkrBZF7SzKHzUWhUzTrGtltD:Lb4mzLMaM68hD0BLX/yYiAst6C4bllDO
Malware Config
Extracted
purecrypter
https://store2.gofile.io/download/5c283eeb-ee75-4585-ac23-386c6a3ea789/Jcafcgneb.dll
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_00fce918b5cf447876a61f05978b2db0
Files
-
VirusShare_00fce918b5cf447876a61f05978b2db0.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ