Behavioral task
behavioral1
Sample
f9cdc120aeec3f849932565e7613794106c703cf5c2ab91386a888a871c8457f.exe
Resource
win7-20240611-en
General
-
Target
f9cdc120aeec3f849932565e7613794106c703cf5c2ab91386a888a871c8457f
-
Size
1.4MB
-
MD5
53d491eb5057f77b813a1bd0392cb4b3
-
SHA1
f2f42877a2e91343da1d9cb27e2a0e1d31062412
-
SHA256
f9cdc120aeec3f849932565e7613794106c703cf5c2ab91386a888a871c8457f
-
SHA512
e06af8a1764250acfdc70e6c0e1367d0ddc28be5712d1c5bf018caab58c1c2ad82eb701d82214d18be1648918b3ac80560d9797f6c21e9dd091c686b3b581b4b
-
SSDEEP
24576:oezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpv3zqxG2Z9mILdsD6zCuy:oezaTF8FcNkNdfE0pZ9ozt4wIlMm79
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9cdc120aeec3f849932565e7613794106c703cf5c2ab91386a888a871c8457f
Files
-
f9cdc120aeec3f849932565e7613794106c703cf5c2ab91386a888a871c8457f.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE