Behavioral task
behavioral1
Sample
9ae881ac4009432b6447fe05ad54db1e70c810c8f3adb2886bab779c65b59e77.exe
Resource
win7-20240611-en
General
-
Target
9ae881ac4009432b6447fe05ad54db1e70c810c8f3adb2886bab779c65b59e77
-
Size
3.3MB
-
MD5
5cbb5fee6e5949640c027679818c618b
-
SHA1
e2545534d58d50ec5355b13f40cf207b650f4fd1
-
SHA256
9ae881ac4009432b6447fe05ad54db1e70c810c8f3adb2886bab779c65b59e77
-
SHA512
e536889f047d5d6941fe181b54a4c8d014d925ea3463c8b2204d743fc627ab25bf8d4bfbdb6de79ed670e9f458ad8eae1ba6eb1b6edd36133f913b77477f4c8d
-
SSDEEP
98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc40x:NFWPClFkx
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ae881ac4009432b6447fe05ad54db1e70c810c8f3adb2886bab779c65b59e77
Files
-
9ae881ac4009432b6447fe05ad54db1e70c810c8f3adb2886bab779c65b59e77.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE