Behavioral task
behavioral1
Sample
735c3c91bd171db35ca808841c775ff4de708a7e6c4074c8869e120134d0ccc6.exe
Resource
win7-20240419-en
General
-
Target
735c3c91bd171db35ca808841c775ff4de708a7e6c4074c8869e120134d0ccc6
-
Size
2.1MB
-
MD5
5eea4999669cb22b2944eec390cacf79
-
SHA1
124bcb764918a2edbe03433755d465b50ebeb83b
-
SHA256
735c3c91bd171db35ca808841c775ff4de708a7e6c4074c8869e120134d0ccc6
-
SHA512
b115268dff56c4fae169f5859a5c541d7292c9c63ed1f7ed98070c52ee99e0e723a3a660ec0493cd40efb4788dd699dd563185ece92780c7530b3ed972511b7e
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIXGv4rzq6c2HA63Rw:BemTLkNdfE0pZrE
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 735c3c91bd171db35ca808841c775ff4de708a7e6c4074c8869e120134d0ccc6
Files
-
735c3c91bd171db35ca808841c775ff4de708a7e6c4074c8869e120134d0ccc6.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE