Behavioral task
behavioral1
Sample
8244e3babed9a89d15534797679d088671b8bc104c08c14a22ea9338e1b3435c.exe
Resource
win7-20240705-en
General
-
Target
8244e3babed9a89d15534797679d088671b8bc104c08c14a22ea9338e1b3435c
-
Size
3.3MB
-
MD5
79a943d87a5321dfa031a11ffd877c0b
-
SHA1
9cd6cbc3964bbca4bc55d0f1da97f065b550bec2
-
SHA256
8244e3babed9a89d15534797679d088671b8bc104c08c14a22ea9338e1b3435c
-
SHA512
3925adc7f591dd7b196b8d22547f49c8568c6904ab255df98ee1ab2b58b7e2c4f8b81022431e5b70087eadcf4f33117c54ce6620e7706c979a0e1f3452c05198
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4U:wFWPClFE
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8244e3babed9a89d15534797679d088671b8bc104c08c14a22ea9338e1b3435c
Files
-
8244e3babed9a89d15534797679d088671b8bc104c08c14a22ea9338e1b3435c.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE