Behavioral task
behavioral1
Sample
2a3b51e35506fc295312746ab7910970N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a3b51e35506fc295312746ab7910970N.dll
Resource
win10v2004-20240802-en
General
-
Target
2a3b51e35506fc295312746ab7910970N.exe
-
Size
129KB
-
MD5
2a3b51e35506fc295312746ab7910970
-
SHA1
e23834b3a30d551908fde04d17e5963096199f0d
-
SHA256
ef37fa3830f5d7ed5bdceb625379b7bbaa818712a6f2daaa0764977e75a91363
-
SHA512
957a29af34694414339b492cbcc12da0b9b7ff4d8737576dd7907eab486d6a6f8483b4cb1ea55af22f07748d5e1ded5327b6fe9ecf93079c865954c698b89d8e
-
SSDEEP
3072:bpqmRdCE7P6C241qV+L5IXgynV0sfYkidx4tA:bJH2ai+lIn9Akidx4
Malware Config
Signatures
-
PureLog Stealer payload 1 IoCs
resource yara_rule sample family_purelog_stealer -
Purelogstealer family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a3b51e35506fc295312746ab7910970N.exe
Files
-
2a3b51e35506fc295312746ab7910970N.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ