Silent[.]Crypto[.]Miner[.]Builder[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Silent.Crypto.Miner.Builder.zip
Size

41.7MB
MD5

078f46f0718a9b1d10474da4c88bf903
SHA1

db07689a323b2f164739f734b181f092bdea3dee
SHA256

fc40672a6a98e258635b82cd184e200a86ddd2c021fa3e7cf419885a23b4a652
SHA512

94c3b49d02d1e947eba7f70d8277955d5b7efd0ec62bbc9fa4707230fbc8b9f0ad3feb7873810b72dd9998331f4c29469ef3c71d79e86d1e646807c35bcd0638
SSDEEP

786432:wY/vSCeWIRaZ38UlJsfIr+gcC3UjB46vrXzJ9iEH48HXRnofZY:w2SbRC38UXsfIigpUjdbNQGTBofZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Silent Crypto Miner Builder.exe

Files

Silent.Crypto.Miner.Builder.zip
.zip
Silent Crypto Miner Builder.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

H:\CRYPTOCOIN\Mining\Lime Miner Modified 02-08-2019\SilentCryptoMiner\SilentCryptoMiner\obj\Release\Silent Crypto Miner Builder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42.5MB - Virtual size: 42.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ