minehax botnet[.]exe | Triage

Sharing

General

Target

minehax botnet.exe
Size

917KB
MD5

3d8173d642ae44cbba012f79bba4dc70
SHA1

02fd3292e7dd3a7f86042abb0270d3a7116c594a
SHA256

37450534b33aceb1c8a1ff16199a61342ed11ab9b8aaae8d7de4559e282658c2
SHA512

ecdb03b56981caa3d447359ea391b902ae4fb9da6fcb5937a1281c352342fe5fb3fd968f843d8aebbbd4e584ab2bb92579e0cb2ef9e2ec9ed3e130f7eff68790
SSDEEP

24576:bPD+wtAMcpZiE8yewphqBppiU7hKaqQtys8wWCzH73:/buMcpZiE8yewphqBppiU7hKL4WoH7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
minehax botnet.exe

Files

minehax botnet.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 799KB - Virtual size: 799KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ