Behavioral task
behavioral1
Sample
ee7bfa9e0ffb3e5e4cd28339dfda9f7874b4347c12eb20aeed82796d732e58c2.exe
Resource
win7-20240704-en
General
-
Target
ee7bfa9e0ffb3e5e4cd28339dfda9f7874b4347c12eb20aeed82796d732e58c2
-
Size
3.1MB
-
MD5
4b36f1d9725fc6b79ac43bb8c92d5ff1
-
SHA1
39fa4408e4993220f5176771215bf8ff005b5fc1
-
SHA256
ee7bfa9e0ffb3e5e4cd28339dfda9f7874b4347c12eb20aeed82796d732e58c2
-
SHA512
a6a7b72d93bf44d614086db45250b91c36d4e630db7a8de49489239db04a2e29fed8ba5e6159c2c2a582357d4610294d5f14e7cd6fb70dbe8673be25fb280997
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4I:wFWPClF4
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee7bfa9e0ffb3e5e4cd28339dfda9f7874b4347c12eb20aeed82796d732e58c2
Files
-
ee7bfa9e0ffb3e5e4cd28339dfda9f7874b4347c12eb20aeed82796d732e58c2.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE