Behavioral task
behavioral1
Sample
cbe7764dba3e5c158187cac9c89eb139d28b898637ca6de44fb7a259f45b6283.exe
Resource
win7-20240704-en
General
-
Target
cbe7764dba3e5c158187cac9c89eb139d28b898637ca6de44fb7a259f45b6283
-
Size
3.1MB
-
MD5
5a54651df853093df1009e42e39b361c
-
SHA1
0c2a100f1834837df52968f6988813f9053beda8
-
SHA256
cbe7764dba3e5c158187cac9c89eb139d28b898637ca6de44fb7a259f45b6283
-
SHA512
f8d04d61e72d3e78c5794d48d0dc84e607c64d635edfbcb6bd9eecfe7964a04005f652ad4c4de110dcf2e3182edcf97dc13eedbb5a6f2a994ef1b2dd7ea9f0f4
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4M:wFWPClFc
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbe7764dba3e5c158187cac9c89eb139d28b898637ca6de44fb7a259f45b6283
Files
-
cbe7764dba3e5c158187cac9c89eb139d28b898637ca6de44fb7a259f45b6283.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE