Behavioral task
behavioral1
Sample
2410060b9816bde368f244c34a751e77b398bd84dadd31ce9fd623506efc8630.exe
Resource
win7-20240221-en
General
-
Target
2410060b9816bde368f244c34a751e77b398bd84dadd31ce9fd623506efc8630
-
Size
3.3MB
-
MD5
b6ae89e9f247019552c6b5543c14a42a
-
SHA1
977a9235ff1ecdf2513567aa8f9e3d5383ff6ad6
-
SHA256
2410060b9816bde368f244c34a751e77b398bd84dadd31ce9fd623506efc8630
-
SHA512
15610ca70d5c7a168c47a82296f4554da4fd3f3ea45e08e51b1277c87edfbcadc10f916cec078e3bfceafffb5ae7e0ea89e7c13f9442b56cb482a439fa5329da
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4d:wFWPClFt
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2410060b9816bde368f244c34a751e77b398bd84dadd31ce9fd623506efc8630
Files
-
2410060b9816bde368f244c34a751e77b398bd84dadd31ce9fd623506efc8630.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE