6miner-v0[.]1[.]0-x64-windows[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

6miner-v0.1.0-x64-windows.zip
Size

5.5MB
MD5

728501180c56c11ded4881c99a7e0669
SHA1

cf955e4801b243de6455866d9e7bc165a9aff66a
SHA256

be2ad91acef94958c257147dad7cb49a8a1490d076e4d2d3b08862f6d06a89c4
SHA512

dcc84a39fb5766114cbbb656f7065ee7e54aced1140d7fa6125a12d7dbc95ac26ad7610184ab186587aa0e99c62c3737c516accdd45f264c02df4e79591689f4
SSDEEP

98304:7B5LzXHjRZ6MXwbyRedErvf1ay2bz+0Tfzu0te/OTPSGo7TL+F5OSBGyAh9:7BdRIMXwbyIEB03O2iOTaGIvMOQGyq9

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

Processes:

resource	yara_rule
static1/unpack001/6miner-v0.1.0-x64-windows/6miner.exe	vmprotect

Files

6miner-v0.1.0-x64-windows.zip
.zip
6miner-v0.1.0-x64-windows/6miner.exe
.exe windows x64

0aec1741610449f8344b1a7538807201

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

htons

kernel32

GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

ShowWindow
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW

shell32

SHGetSpecialFolderPathA

winmm

timeEndPeriod

wtsapi32

WTSSendMessageW

Sections

.text
Size: - Virtual size: 589KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
6miner-v0.1.0-x64-windows/README.md
6miner-v0.1.0-x64-windows/mine_hns.bat

Sharing

General

Malware Config

Signatures

Files

0aec1741610449f8344b1a7538807201

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

shell32

winmm

wtsapi32

Sections

.text Size: - Virtual size: 589KB

.rdata Size: - Virtual size: 200KB

.data Size: - Virtual size: 4.4MB

.pdata Size: - Virtual size: 29KB

_RDATA Size: - Virtual size: 148B

.vmp0 Size: - Virtual size: 3.4MB

.vmp1 Size: 5.8MB - Virtual size: 5.8MB

.reloc Size: 512B - Virtual size: 212B

.rsrc Size: 265KB - Virtual size: 265KB

.text
Size: - Virtual size: 589KB

.rdata
Size: - Virtual size: 200KB

.data
Size: - Virtual size: 4.4MB

.pdata
Size: - Virtual size: 29KB

_RDATA
Size: - Virtual size: 148B

.vmp0
Size: - Virtual size: 3.4MB

.vmp1
Size: 5.8MB - Virtual size: 5.8MB

.reloc
Size: 512B - Virtual size: 212B

.rsrc
Size: 265KB - Virtual size: 265KB