Behavioral task
behavioral1
Sample
e7cc21ea07e516d52fe2c17b642f41a46fc03a75e1ee357796be118b68ea4a99.exe
Resource
win7-20240704-en
General
-
Target
e7cc21ea07e516d52fe2c17b642f41a46fc03a75e1ee357796be118b68ea4a99
-
Size
3.0MB
-
MD5
269eadef3d94daad4775f41c6f7b00f7
-
SHA1
08988d6a003757b97ef09df795a2438d9e7b429d
-
SHA256
e7cc21ea07e516d52fe2c17b642f41a46fc03a75e1ee357796be118b68ea4a99
-
SHA512
906c737cb5c11d81caf3fd845ab91129fe15198d14265a07eb8b9330ed562ff468ec1dacdfc570ab5eb8f4ca47734d334f4aae5fe2e2e4e10c2db9b522fa2b2f
-
SSDEEP
49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6NsNtJV3z:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RF
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7cc21ea07e516d52fe2c17b642f41a46fc03a75e1ee357796be118b68ea4a99
Files
-
e7cc21ea07e516d52fe2c17b642f41a46fc03a75e1ee357796be118b68ea4a99.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE