Behavioral task
behavioral1
Sample
e3adcaa0b5992632e136ce3427b2e0c339337da164be514ecbbd9c963826c92d.exe
Resource
win7-20240508-en
General
-
Target
e3adcaa0b5992632e136ce3427b2e0c339337da164be514ecbbd9c963826c92d
-
Size
3.4MB
-
MD5
908ee1899fa96bf231007ff611a6e1fe
-
SHA1
abaaaba144df89810f232936b5670ad5b3b6e93c
-
SHA256
e3adcaa0b5992632e136ce3427b2e0c339337da164be514ecbbd9c963826c92d
-
SHA512
4489a06ebc83528736374b3e4b37318c58ddbb60a430db0bc7d3197fb74ad6b6b56d8edb7393b81753a3e4dc5a7036c9a06c8b23c1ac77569022fe8889c0fbd6
-
SSDEEP
98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWV:7bBeSFkx
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3adcaa0b5992632e136ce3427b2e0c339337da164be514ecbbd9c963826c92d
Files
-
e3adcaa0b5992632e136ce3427b2e0c339337da164be514ecbbd9c963826c92d.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE