Behavioral task
behavioral1
Sample
1d2a543bb17624cb698942efbc3e4e409d6900a1eb13974a0e069f17bd67ccfa.exe
Resource
win7-20240611-en
General
-
Target
1d2a543bb17624cb698942efbc3e4e409d6900a1eb13974a0e069f17bd67ccfa.exe
-
Size
2.9MB
-
MD5
ced44573f3051b1d31e7ffda787b6120
-
SHA1
d85e339afc8b20552dc24085f996e2f81c8fd72c
-
SHA256
1d2a543bb17624cb698942efbc3e4e409d6900a1eb13974a0e069f17bd67ccfa
-
SHA512
26f6c6ec5eedfe25fb6feb2d28c91e8c3621115e425a78c6c129271584b2e03f65e086d803b67d42b4b3b7a6461baf0a9998973fe0f4eba3a7e40ce94f490011
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzcJ2k2oj6tPYnv:w0GnJMOWPClFdx6e0EALKWVTffZiPAc6
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d2a543bb17624cb698942efbc3e4e409d6900a1eb13974a0e069f17bd67ccfa.exe
Files
-
1d2a543bb17624cb698942efbc3e4e409d6900a1eb13974a0e069f17bd67ccfa.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE