Behavioral task
behavioral1
Sample
236d6b6b3b0b942ec8daf424bdc7f9494cbb40091aa1a26d448e54ebabe17678.exe
Resource
win7-20240508-en
General
-
Target
236d6b6b3b0b942ec8daf424bdc7f9494cbb40091aa1a26d448e54ebabe17678.exe
-
Size
3.4MB
-
MD5
2bded7d38bae57ca9ddb9c9b783ff320
-
SHA1
2020532b11f7f69399c661432021aab9e32b8063
-
SHA256
236d6b6b3b0b942ec8daf424bdc7f9494cbb40091aa1a26d448e54ebabe17678
-
SHA512
ff89f9c9f87f7fe3e4138a7d319162ccd84166de8142b1537f66aa7439c4a808062ecbbbb56e343bb72210e248619e9f334bf37fc6445be1127251c7f17b0626
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc40k:wFWPClFkk
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 236d6b6b3b0b942ec8daf424bdc7f9494cbb40091aa1a26d448e54ebabe17678.exe
Files
-
236d6b6b3b0b942ec8daf424bdc7f9494cbb40091aa1a26d448e54ebabe17678.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE