purecrypter | 0f7f8a8cc366787a6d3c07814295f0592acee8cee552c5d15fb4c996f2067248

General

Target

0f7f8a8cc366787a6d3c07814295f0592acee8cee552c5d15fb4c996f2067248
Size

4KB
MD5

1338a298b4605108250e13be00b6e22f
SHA1

93f963f08cdd070d7ebe3091e774815db45cd652
SHA256

0f7f8a8cc366787a6d3c07814295f0592acee8cee552c5d15fb4c996f2067248
SHA512

c50ba9d58fe010f8c427b0278525a9466d6d01b97b25b6fe02507235d8e54807122b05d94bdf73941291f832e9a739f0bcfa34f0f10ab7b84671474c2c89b9e2
SSDEEP

96:mHoSytS7HRX3WX6m82aJIXGfq4bbQzRXgAinE4jAl:mc8X3K82q/azJHiLcl

Score

10^/10

purecrypter

Family

purecrypter

C2

https://transfer.sh/get/dtzeXI/Zalsbg.bmp

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/d9139bcd0b6b44e2f3d766d1d56377a756a0880730f7aeb03e29c964116933a4

0f7f8a8cc366787a6d3c07814295f0592acee8cee552c5d15fb4c996f2067248
.zip

Password: infected
d9139bcd0b6b44e2f3d766d1d56377a756a0880730f7aeb03e29c964116933a4
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ