purecrypter | eee76d74368111c385e634a9f4f5a9cf[.]bin | Triage

Sharing

General

Target

eee76d74368111c385e634a9f4f5a9cf.bin
Size

48KB
MD5

910632404ecc7e26ce2f935862fba963
SHA1

2505098ffa2a63a04b23054069e06bd192126746
SHA256

746b6e2d51fc554daccd099fe3c05c24e020a5de9d0926041b5980b7ef553340
SHA512

f681ad186871c48af9dfa70f7c1d08ba29c0403de4f5df1b16e10f70371139065a7ffbf1727ae3c0b598ab53357a234a3606ace11248f8f60810dca298a3b327
SSDEEP

1536:+S0PsPcrsUeslqJo++WZ/9ajJF0k7CVGEJb:FD3sqodWd9wF0k7BEh

Score

10^/10

purecrypter

Malware Config

Extracted

Family

purecrypter

C2

https://etehadshipping.com/chmod permission 777/panel/Uslmwziyya.vdf

Signatures

Purecrypter family
purecrypter

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/82ee5c8372f9bc8ac9cfac2833c19d238fa8a60fa32e6d27d9fc781d2e64dc25.exe

Files

eee76d74368111c385e634a9f4f5a9cf.bin
.zip

Password: infected
82ee5c8372f9bc8ac9cfac2833c19d238fa8a60fa32e6d27d9fc781d2e64dc25.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ