Static task
static1
Behavioral task
behavioral1
Sample
MinerSearch_v1.4.7.2.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
MinerSearch_v1.4.7.2.exe
Resource
win10v2004-20240226-en
General
-
Target
MinerSearch_v1.4.7.2.exe
-
Size
187KB
-
MD5
61cdb673602f23ee2d43effc7e169acb
-
SHA1
35ad91bcb7e6a3e20db822e651bd9d2dd506991f
-
SHA256
e63041e05c9cb47a7a22e2429e35f496594bab501f4be4364b8bca9f369584a0
-
SHA512
df8863b84fd5ae19273baccde5dd7960cd63824f4deb18704bd8055d301c387d7007057ea6d8af65a3050d8af2e35977ac8ab13f54ef6ab6e5da57f012aa0d0e
-
SSDEEP
3072:/a/UUuJ99+ANKazhLvoVqSUZZeFfGUQZ5oYlhWrZR1buW9cabbqSFI7RMSddOezn:/a/UUuJ99+MKAvo9UZgFO3LWrZbcabbW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MinerSearch_v1.4.7.2.exe
Files
-
MinerSearch_v1.4.7.2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ