Silent XMR Miner Builder[.]exe | Triage

Sharing

General

Target

Silent XMR Miner Builder.exe
Size

38.2MB
MD5

5d7c1b7e0dfc268c1d7fd78ee0d74c71
SHA1

71f9d9872c4aec12556a885542ffdcae3f11f693
SHA256

afb19f7e92067a16800054daf6599d1a9cfcb647e322760e6c542b1cdf8ece67
SHA512

d899defc62d7378b647a6b84e2e14d872deec142947c07531954544543882b5ba41b80d08c026a49cadc1e17d9267ddaf44ab0d9ce5fdeb9c10846e4c99d3821
SSDEEP

786432:WC9zqGRhRbyDrcY8/pYQMpBu2mBnb3fDHECM2Eux5roSbTUE2PBvUu2FfUZwxd7Q:WC9zLhRGxQpYhs9BbrHMenrjdE5x89Xk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Silent XMR Miner Builder.exe

Files

Silent XMR Miner Builder.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

H:\CRYPTOCOIN\Mining\Lime Miner Modified 02-08-2019\Version 1.4.4 SHELLCODE\SilentXMRMiner\obj\Release\Silent XMR Miner Builder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38.2MB - Virtual size: 38.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ