Behavioral task
behavioral1
Sample
050140c11137205e5b93a16d3a7a8eee66184b56fb70153880df11145e027708.exe
Resource
win7-20240221-en
General
-
Target
050140c11137205e5b93a16d3a7a8eee66184b56fb70153880df11145e027708
-
Size
2.2MB
-
MD5
cc983d6512765e219518afdf21d5c202
-
SHA1
8e2fc1c8d9ec012e0dbd284e2beaaa97df0135c7
-
SHA256
050140c11137205e5b93a16d3a7a8eee66184b56fb70153880df11145e027708
-
SHA512
2a677b8861f3a8b93a1506d64b408a18572824f5d8c6db76a009d9d73d5e4c25b799c4d2d5a17aaeae35452da639a7c969a7710170f86ee639c698c40b391129
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+ANXx72m8:BemTLkNdfE0pZrt
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 050140c11137205e5b93a16d3a7a8eee66184b56fb70153880df11145e027708
Files
-
050140c11137205e5b93a16d3a7a8eee66184b56fb70153880df11145e027708.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE