Behavioral task
behavioral1
Sample
fb2b2475b815a90a26002e2d0e264b1d5e18b0b76b4911a0ad68783e20a69840.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb2b2475b815a90a26002e2d0e264b1d5e18b0b76b4911a0ad68783e20a69840.exe
Resource
win10v2004-20240226-en
General
-
Target
fb2b2475b815a90a26002e2d0e264b1d5e18b0b76b4911a0ad68783e20a69840
-
Size
6KB
-
MD5
b07d1f0141275eb6b6e35e948a5f63f1
-
SHA1
b047666885d54a5f59fa8dc3dd17d1097d3ae12b
-
SHA256
fb2b2475b815a90a26002e2d0e264b1d5e18b0b76b4911a0ad68783e20a69840
-
SHA512
c9e3dc67c81aa5da8724f29afec24a1ebac8e01d655acc8a5a4ea1efc01f094d3c8e115b127d1154308fdfc4c8da7f13a5b046e829153ee0ea561ec4d9a4ac22
-
SSDEEP
48:6a/UR7UC1rg7fpJfzw+2sF3YSFEO0IRC+ebPQKwb565VARX54tiOlXItqFDvpfbi:Yggrg7fm4oPIRCRsnbsVAYlI+BzNt
Malware Config
Extracted
purecrypter
http://80.66.76.30/Eryyhcchii.vdf
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb2b2475b815a90a26002e2d0e264b1d5e18b0b76b4911a0ad68783e20a69840
Files
-
fb2b2475b815a90a26002e2d0e264b1d5e18b0b76b4911a0ad68783e20a69840.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ