Behavioral task
behavioral1
Sample
86947741757295cf2a23f5ff804be490.exe
Resource
win7-20231025-en
General
-
Target
86947741757295cf2a23f5ff804be490.bin
-
Size
1.6MB
-
MD5
86947741757295cf2a23f5ff804be490
-
SHA1
3be8f2daf4f2af5d4b6640cc09c0eebbae79148e
-
SHA256
79445ed8091590c53effa59099b4c4f6cc74b634dbb8f1f43d0239cf642e1dd5
-
SHA512
8228852817ea3aa079e89d893a519e12bb33ec657829d706ab4d3254c02a0b65ee23cc1f2c223e760f0dcb6a053825606d0b395f4bef64c1c1c7d274ce594d13
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIXSLOmL+2v0HDd:BemTLkNdfE0pZrd
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86947741757295cf2a23f5ff804be490.bin
Files
-
86947741757295cf2a23f5ff804be490.bin.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE