Behavioral task
behavioral1
Sample
8eb33b6b34358e3d4164365d4200e13d12cd9bbabd2be3c69fad3a83eb2bbae1.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8eb33b6b34358e3d4164365d4200e13d12cd9bbabd2be3c69fad3a83eb2bbae1.exe
Resource
win10v2004-20240802-en
General
-
Target
8eb33b6b34358e3d4164365d4200e13d12cd9bbabd2be3c69fad3a83eb2bbae1
-
Size
10KB
-
MD5
b98844bdecfcb5f6c074f0ed878f031e
-
SHA1
42b70dc5a10357391d98243f4ecc94ff3bc03535
-
SHA256
8eb33b6b34358e3d4164365d4200e13d12cd9bbabd2be3c69fad3a83eb2bbae1
-
SHA512
a6d1f27e1a7050f1aaded6edb9dd3f471fa93e04791aad435ec838570371ce3c32a4609d523e761951e1fdd5d2b4fd7d42942ddcf41b16aca2099793beb29720
-
SSDEEP
96:i0fe6o+JzKXolTLbUyCxsTCDCm2EqGZeFrwHGa6CTuasJaVa1abaXAaOQ2WzNt:PXo+l2olTnUjsO+m2ZGZIwICCZ/
Malware Config
Extracted
purecrypter
https://dc.12580.host/Jyfoxfsxi.dat
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eb33b6b34358e3d4164365d4200e13d12cd9bbabd2be3c69fad3a83eb2bbae1
Files
-
8eb33b6b34358e3d4164365d4200e13d12cd9bbabd2be3c69fad3a83eb2bbae1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ