Behavioral task
behavioral1
Sample
a0b9952cab922438230220eef569b35752d977a19c92259bb1a6f03fee7fb0a6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0b9952cab922438230220eef569b35752d977a19c92259bb1a6f03fee7fb0a6.dll
Resource
win10v2004-20220812-en
General
-
Target
a0b9952cab922438230220eef569b35752d977a19c92259bb1a6f03fee7fb0a6
-
Size
18KB
-
MD5
73e5ccb67e23ecf1f4085952235a1e0c
-
SHA1
d2c5dd82b18d4c774f54bc663e98851ad007e0ed
-
SHA256
a0b9952cab922438230220eef569b35752d977a19c92259bb1a6f03fee7fb0a6
-
SHA512
85dc42cd9d2874024a8746e32fcefd9c7ee2c137f5ed42c22a98e6fbd9659936b8ea1166d332122684508d631f3a2399f69297f136daf8f6d8b9438a84daac66
-
SSDEEP
384:JBRgMi1ppN9ep97Oe76QG5WcMl8XB9rEJw/bynUR3mVm:bRS1ppN9u7OXQqxj9x/byURK
Malware Config
Signatures
-
Detectes TRex Payload 1 IoCs
resource yara_rule sample miner_trex
Files
-
a0b9952cab922438230220eef569b35752d977a19c92259bb1a6f03fee7fb0a6.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ