Behavioral task
behavioral1
Sample
a8c07b312bd93e73afcac4fc86bbc74b8a0231a4a22cca5d12937415f2caf36a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8c07b312bd93e73afcac4fc86bbc74b8a0231a4a22cca5d12937415f2caf36a.exe
Resource
win10v2004-20240709-en
General
-
Target
a8c07b312bd93e73afcac4fc86bbc74b8a0231a4a22cca5d12937415f2caf36a
-
Size
2.5MB
-
MD5
11448335941d972c721f4d1296093ba0
-
SHA1
0c6614179accfc4e2d0b58164bdc4fe473898636
-
SHA256
a8c07b312bd93e73afcac4fc86bbc74b8a0231a4a22cca5d12937415f2caf36a
-
SHA512
392ecece16175be2c2a47ff6a8cbfffb53578cdbf1da66c8f5ef426d675f819704147ac866eab7a092840ccc9e223230cfe8c44660c9598c6ae30d9e5a6c2e8a
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzeaEUiRt2E:w0GnJMOWPClFdx6e0EALKWVTffZiPAcg
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8c07b312bd93e73afcac4fc86bbc74b8a0231a4a22cca5d12937415f2caf36a
Files
-
a8c07b312bd93e73afcac4fc86bbc74b8a0231a4a22cca5d12937415f2caf36a.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE