Behavioral task
behavioral1
Sample
055d1f89d966b8950b814b479d8c9fe4.exe
Resource
win7-20231215-en
General
-
Target
055d1f89d966b8950b814b479d8c9fe4
-
Size
1.6MB
-
MD5
055d1f89d966b8950b814b479d8c9fe4
-
SHA1
bca198c7a61e13d6a90120b11b264b393a009bf8
-
SHA256
64b16296acef9adde90571b8281fb5b7083bfda8209941189218a720645773b7
-
SHA512
1b421004869461449010d1d1e39f29cb97de9d8149cac512fa3a3d9565273f7971c6fe0db7bc23647b9ae79df7806f1542835d8e07f06b74e61ff7b4dafd913d
-
SSDEEP
24576:dezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbMwlKjpLdBWelxqsfNMNr79DsI/P:dezaTF8FcNkNdfE0pZ9oztQwIAF/AIww
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 055d1f89d966b8950b814b479d8c9fe4
Files
-
055d1f89d966b8950b814b479d8c9fe4.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE