Behavioral task
behavioral1
Sample
928bd6b5292b772cc7d8d748721410385450ae2dac800f31c2f1fbb2df83cab2.exe
Resource
win7-20240319-en
General
-
Target
928bd6b5292b772cc7d8d748721410385450ae2dac800f31c2f1fbb2df83cab2
-
Size
3.0MB
-
MD5
06436b628f52e98d4398e3f604328f74
-
SHA1
3edc2320a3f07eb5d3382b39c8da1e7cda3adef3
-
SHA256
928bd6b5292b772cc7d8d748721410385450ae2dac800f31c2f1fbb2df83cab2
-
SHA512
a9d46fd31cda8987d5b6037076a306be56940cfc21d45ff683a8d31d1e324a4cd7572c108c4a6408756f46bc006dec058ba21901f8eaa85b6f939cc6a017b051
-
SSDEEP
98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4X:NFWPClFn
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 928bd6b5292b772cc7d8d748721410385450ae2dac800f31c2f1fbb2df83cab2
Files
-
928bd6b5292b772cc7d8d748721410385450ae2dac800f31c2f1fbb2df83cab2.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE