b6911429ae3b26550376955c5d345710 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6911429ae3b26550376955c5d345710
Size

28.6MB
MD5

b6911429ae3b26550376955c5d345710
SHA1

3b7ea83f3f3ea153488b49fe6285fe2fb8ca4ea4
SHA256

9cf243993604fcb64f3eb252fc7324cadc1bf71ba4ad614787c5fef53b0ed48d
SHA512

f5d18cb7b170daca39cfd0b1c0e78133df5d389fc80bc196c7d1c2f56accafaf44e0ae6eff207547d92c2499482421751d815fb85765bf7c5d87e011245d9647
SSDEEP

393216:+Wsn7fEJN6Tu4FfaRW4SdS1IdvCA9DG8EjNTFd0CEzpV67niH6Fw1OwBT4i8s:xpsbPCAVXQRsrpVGiaOAwl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6911429ae3b26550376955c5d345710

Files

b6911429ae3b26550376955c5d345710
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projekty\VB.NET\New\Miner\SilentXMRMiner-master\SilentXMRMiner\obj\Debug\Silent XMR Miner Builder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28.6MB - Virtual size: 28.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ