Behavioral task
behavioral1
Sample
cd90450da0cf4e3bde9dded8696bbf1ff57562daa6e7c8137f1450ed07ec5a74.exe
Resource
win7-20240221-en
General
-
Target
cd90450da0cf4e3bde9dded8696bbf1ff57562daa6e7c8137f1450ed07ec5a74
-
Size
3.2MB
-
MD5
780b1688ae4d09bbd7b3d7d0483128eb
-
SHA1
6c87449740369221eb570f77bd3aaddee9ef6af7
-
SHA256
cd90450da0cf4e3bde9dded8696bbf1ff57562daa6e7c8137f1450ed07ec5a74
-
SHA512
c9f400ee24f292227678f7344bcc1177ecfd2c0791535182916ceda9eb85728a246ac7d95e122edb785686db67e901ad36b837636e33e17ff9c1bae4afcd88f2
-
SSDEEP
98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4k:NFWPClFU
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd90450da0cf4e3bde9dded8696bbf1ff57562daa6e7c8137f1450ed07ec5a74
Files
-
cd90450da0cf4e3bde9dded8696bbf1ff57562daa6e7c8137f1450ed07ec5a74.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE