The Purity dll File Malware Analysis

Technical Analysis

File Name	Purity.dll
File Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.230.174
Database Version	2025-12-06 22:00:19 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	f449018076e0f62d06960c2c39f787f7
SHA1	f74ff195f9cd5d1686205e14d59956fd208ec7a0
SHA256	160ab1f5e0d9c5bfe09bf8c59b726e90ffa775a94f4b76deaf5e1bc706e42bd5
SHA512	fcbe2ce77298b6125d4ef3ce8200072c8ce52997c477a8654b2fe6e1fbe71717df078dcc07eba3561724725be8d04a8c5eb53e5d5c2ea56ff690c2846c13fa30
ImpHash	cce0f406f3f040de2342f93de825fe0a

PE Analysis

Basic Information

▼

Image Base	`0x10000000`
Entry Point	`0x1006288c`
Compilation Time	2007-11-28 04:20:17
Checksum	0x003f15e9 (Actual: 0x003f15e9)
OS Version	4.0
PEiD Signatures	`PE32 executable (DLL) (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	8 libraries KERNEL32, USER32, GDI32, comdlg32, ADVAPI32, SHELL32, ole32, COMCTL32
Exports	3 functions
Resources	149 Resources
Sections	5 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	491,514 bytes	491,520 bytes	6.61 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D13146771755E9162B3C768AB8E38282`
`.rdata`	`0x00079000`	77,209 bytes	77,824 bytes	5.91 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`F7BB25695539D59CCBE306763803A861`
`.data`	`0x0008c000`	860,580 bytes	16,384 bytes	4.13 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`6E23A31E6AD86C6AC4B5EC5670E13E6B`
`.rsrc`	`0x0015f000`	3,469,156 bytes	3,469,312 bytes	7.44 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`6CDF7CEF2790B73BC0CA079D4E3AFB35`
`.reloc`	`0x004ae000`	49,716 bytes	53,248 bytes	4.60 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`AF165C02BC36AFB2BE076CD7ADFD6655`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 149 (3,461,936 bytes)

Resource Type	Count	Total Size	Percentage
RT_BITMAP	148	3,461,574 bytes	100%
RT_MANIFEST	1	362 bytes	0%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The Purity.dll File Analysis