Behavioral task
behavioral1
Sample
24cdfac19b488b84fa26fb3b29570532f38bafc4629ce2518aaac03560f82dca.exe
Resource
win7-20240611-en
General
-
Target
24cdfac19b488b84fa26fb3b29570532f38bafc4629ce2518aaac03560f82dca
-
Size
2.8MB
-
MD5
66da1b811b8a0f1d82c7754cafe578e5
-
SHA1
34f15847afa282f039c9e102cd08ba013f5c4782
-
SHA256
24cdfac19b488b84fa26fb3b29570532f38bafc4629ce2518aaac03560f82dca
-
SHA512
1390078022a506894c6b4d3e777781edb3f2b03e4b7ec3be99f7dccb437095ae1a96ce062225f49bc7b70d0d70aaf6295f25b6f3e15a2d76b3b95eea47f3fd28
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrM5CnBnoY204E:w0GnJMOWPClFdx6e0EALKWVTffZiPAcC
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24cdfac19b488b84fa26fb3b29570532f38bafc4629ce2518aaac03560f82dca
Files
-
24cdfac19b488b84fa26fb3b29570532f38bafc4629ce2518aaac03560f82dca.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE