Behavioral task
behavioral1
Sample
1bddaf8d563c16042c4c4d6020571890N.exe
Resource
win7-20240705-en
General
-
Target
1bddaf8d563c16042c4c4d6020571890N.exe
-
Size
2.7MB
-
MD5
1bddaf8d563c16042c4c4d6020571890
-
SHA1
a1e9de9380a80e2bdce664f7b1e9e04af6afed0f
-
SHA256
13e13fc360a9ad9cd05de0b22841f9cc0a2915e1f16fa2d929701dc781b53398
-
SHA512
69da99beda50e3bc2afbf7cdee8057d90833b7456ecff7720f957540e9e9b7fa83b5c131c50dffc43b2164509c31ff41559cf40113e9333fc03e6c13d7bf37b3
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzeaEUiRJQvnqeVwZ:w0GnJMOWPClFdx6e0EALKWVTffZiPAcg
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bddaf8d563c16042c4c4d6020571890N.exe
Files
-
1bddaf8d563c16042c4c4d6020571890N.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE