Behavioral task
behavioral1
Sample
58219823401f24bd51efade423f65322e4a6d9b32181f24869fc934a07c1ec04.exe
Resource
win7-20240704-en
General
-
Target
58219823401f24bd51efade423f65322e4a6d9b32181f24869fc934a07c1ec04
-
Size
3.1MB
-
MD5
eccf49dbc2fef87c659b080e89b9487a
-
SHA1
34b370fa2b35f36b0c3c815c3b09d4d391c0e5ee
-
SHA256
58219823401f24bd51efade423f65322e4a6d9b32181f24869fc934a07c1ec04
-
SHA512
91bb0a12e6d0ea0a895c45919e9a3ae2a78bdad66c5190e175b20b1614033aa677a9f0a5589e457c5b18a0deff91b982264312dbbad13762ba4f5801430a17af
-
SSDEEP
98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWL:7bBeSFkn
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58219823401f24bd51efade423f65322e4a6d9b32181f24869fc934a07c1ec04
Files
-
58219823401f24bd51efade423f65322e4a6d9b32181f24869fc934a07c1ec04.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE