Behavioral task
behavioral1
Sample
360914d9ed7176b7c8076ba895e34350_console.exe
Resource
win7-20230831-en
General
-
Target
360914d9ed7176b7c8076ba895e34350_console.exe
-
Size
1.9MB
-
MD5
360914d9ed7176b7c8076ba895e34350
-
SHA1
e36f75f35b9b11fa45b298cbdc5e4f7acf09525b
-
SHA256
0cc65ef3c46116df30f9e25cc2a7bfe358a7e1e1af1ef99f9a2a7de63d341274
-
SHA512
e79081d7d3b44ee436a8c2e891bc0e9e6817d8fde981528f1abe0b63a87f01fc3dcedf31d9826ee9e58c878c646546f88da55417eef152082b2f4197cd8d2820
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wICbbnlD5/xFH:BemTLkNdfE0pZrM
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 360914d9ed7176b7c8076ba895e34350_console.exe
Files
-
360914d9ed7176b7c8076ba895e34350_console.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE