Behavioral task
behavioral1
Sample
0b10407d8b40d183b5321274e79bee0e620c7fb52bdd43244a2612f75d313a7d.exe
Resource
win7-20240419-en
General
-
Target
0b10407d8b40d183b5321274e79bee0e620c7fb52bdd43244a2612f75d313a7d.exe
-
Size
2.2MB
-
MD5
e9bd54b65ae4cd803a87754349fe96b0
-
SHA1
92a9fe43c182bae17babf5490303d74e02b53080
-
SHA256
0b10407d8b40d183b5321274e79bee0e620c7fb52bdd43244a2612f75d313a7d
-
SHA512
f2a0e583c9afa38d11699c5573feaafdcad38ecbda6e614c1c712d921646cf77c1776a09ac6fa4c8c5d24cdeacec05497edc8f007e6b6fad17f4ef3e9d63a318
-
SSDEEP
49152:oezaTF8FcNkNdfE0pZ9ozt4wIQF3OioF5qd/BuJ9/WR:oemTLkNdfE0pZrQX
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b10407d8b40d183b5321274e79bee0e620c7fb52bdd43244a2612f75d313a7d.exe
Files
-
0b10407d8b40d183b5321274e79bee0e620c7fb52bdd43244a2612f75d313a7d.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE