Behavioral task
behavioral1
Sample
288c2031bd74a0fcf5e111cf98086902ba1ada0274c4ff6a8c1f82ef453dac52.exe
Resource
win7-20240508-en
General
-
Target
288c2031bd74a0fcf5e111cf98086902ba1ada0274c4ff6a8c1f82ef453dac52
-
Size
2.9MB
-
MD5
5f4e15523be87b9a6d3a08c35465abae
-
SHA1
4ffc7db81b8ad9803b79f3836a68d83635b1443a
-
SHA256
288c2031bd74a0fcf5e111cf98086902ba1ada0274c4ff6a8c1f82ef453dac52
-
SHA512
7714db78c4acbd8f9b569bf52e38a2b8dfac571daa628951b209be45cd63551b487ab664ce1e9da72c5e8251ed3133bd81ee5ee3e10b322b23173f9f23828011
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWH/xbAcmi/:w0GnJMOWPClFdx6e0EALKWVTffZiPAcH
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 288c2031bd74a0fcf5e111cf98086902ba1ada0274c4ff6a8c1f82ef453dac52
Files
-
288c2031bd74a0fcf5e111cf98086902ba1ada0274c4ff6a8c1f82ef453dac52.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE