Behavioral task
behavioral1
Sample
f383d42f52d226f1280dae8f3c761e6d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f383d42f52d226f1280dae8f3c761e6d.exe
Resource
win10v2004-20231215-en
General
-
Target
f383d42f52d226f1280dae8f3c761e6d.exe
-
Size
42KB
-
MD5
f383d42f52d226f1280dae8f3c761e6d
-
SHA1
4f7f76201dd474b8839da97821c8704afdab2ffe
-
SHA256
f01893f0ea80536648b45114aa491a4559b53696290f58ec66335bc5c116d9db
-
SHA512
eb4d74f1a0c21fdae1a8eddbc7a9cb42aa04d5f27e19f9b12e11c303ba52292100f57e3a9b8b0bc1b05588eb584d8ad3c73fc5e717d36169adde516c90380c18
-
SSDEEP
96:QTgo70FlDiC5ZUo4ossr9r4GvgsKC5Ys0X+zNt:QTgJhYo4orprW7o0XY
Malware Config
Extracted
purecrypter
http://103.183.118.30/THANOS/Uhjbks.mp4
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f383d42f52d226f1280dae8f3c761e6d.exe
Files
-
f383d42f52d226f1280dae8f3c761e6d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ