Behavioral task
behavioral1
Sample
48d3ea093c58dcfdb5db4967166364ca0e3f56323cc66627532287ddf127bdf9.exe
Resource
win7-20240704-en
General
-
Target
48d3ea093c58dcfdb5db4967166364ca0e3f56323cc66627532287ddf127bdf9
-
Size
2.9MB
-
MD5
43b7ecb4cf898921501519a10d3cb3ba
-
SHA1
7c74c4ea10aeca174b2e0a5859c1e086bf0e4345
-
SHA256
48d3ea093c58dcfdb5db4967166364ca0e3f56323cc66627532287ddf127bdf9
-
SHA512
986d8db46cce7780db4551d7a43dba0e263c05e3b4eee2e9ebf120efd8315057cfe18800ff2ad782369caae8058a7c4993c8f1238929a13eca1ed712812b2636
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dz8MVyc5K1jiiJTYi:w0GnJMOWPClFdx6e0EALKWVTffZiPAci
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48d3ea093c58dcfdb5db4967166364ca0e3f56323cc66627532287ddf127bdf9
Files
-
48d3ea093c58dcfdb5db4967166364ca0e3f56323cc66627532287ddf127bdf9.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE