Behavioral task
behavioral1
Sample
c0eda46da3954d8cb4e1dbf90e008fdeb5c268c3ef5b207b1fef1524a79137ee.exe
Resource
win7-20240611-en
General
-
Target
c0eda46da3954d8cb4e1dbf90e008fdeb5c268c3ef5b207b1fef1524a79137ee
-
Size
2.9MB
-
MD5
19150496bee6be357d19b997d2a8c825
-
SHA1
8c96ffde07a95eb3f5fd1d6a1e9121dc1fe931cd
-
SHA256
c0eda46da3954d8cb4e1dbf90e008fdeb5c268c3ef5b207b1fef1524a79137ee
-
SHA512
cbee66cdddf893131f331e2c9689ce78ca046e69f0064bc5e074d9294488829127dbde5c9fa7ca1a0c15e42f065c4fe9ca610bef0043c0b4ed1b446d73e5623b
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcquVoVJjDNOT:w0GnJMOWPClFdx6e0EALKWVTffZiPAc/
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0eda46da3954d8cb4e1dbf90e008fdeb5c268c3ef5b207b1fef1524a79137ee
Files
-
c0eda46da3954d8cb4e1dbf90e008fdeb5c268c3ef5b207b1fef1524a79137ee.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE