Behavioral task
behavioral1
Sample
b79edf0510a2b0cc0cb299568934224b7943762477e3e3c732479b1c7085863b.exe
Resource
win7-20240704-en
General
-
Target
b79edf0510a2b0cc0cb299568934224b7943762477e3e3c732479b1c7085863b
-
Size
1.6MB
-
MD5
9de99c61e20225544c27d91fe06812f0
-
SHA1
5fe837f3cf281d6c676b246c541ba83c30277cd8
-
SHA256
b79edf0510a2b0cc0cb299568934224b7943762477e3e3c732479b1c7085863b
-
SHA512
9a5d8e13898fe04ed0f7a8ede4cc47f0e44936232f12fa6c404a2408c5076402c84ea5c2e59ff32b2eea9c5e4b84839f5c12ab52766862365b87e8d1e4881acf
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+AX53:BemTLkNdfE0pZr2
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b79edf0510a2b0cc0cb299568934224b7943762477e3e3c732479b1c7085863b
Files
-
b79edf0510a2b0cc0cb299568934224b7943762477e3e3c732479b1c7085863b.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE