Behavioral task
behavioral1
Sample
virussign.com_7eba387857e330ca5c1d2c4fe2607440.exe
Resource
win7-20240220-en
General
-
Target
virussign.com_7eba387857e330ca5c1d2c4fe2607440.vir
-
Size
2.8MB
-
MD5
7eba387857e330ca5c1d2c4fe2607440
-
SHA1
51acf80f5f7d0c9c21996b4bec47ed940f3a4d81
-
SHA256
7534c4537378f8480ed5f827dd9fd5a064997458a5d85fa12a3c82ef6d980d1c
-
SHA512
797a98a1051fc5d76e093ea76fdfff1178caf2e837f01c5a56be512a8ca9dd3658a375523112fe8bdc3266d16df67d9971e57d644421711dff537d80a161e572
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWH8SKJhSXB:N0GnJMOWPClFdx6e0EALKWVTffZiPAcl
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_7eba387857e330ca5c1d2c4fe2607440.vir
Files
-
virussign.com_7eba387857e330ca5c1d2c4fe2607440.vir.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE