Behavioral task
behavioral1
Sample
43b8e1192a35994f1dce19d11d9cd2327eb164188227e1aeb68587ae529f1701.exe
Resource
win7-20240705-en
General
-
Target
43b8e1192a35994f1dce19d11d9cd2327eb164188227e1aeb68587ae529f1701
-
Size
3.2MB
-
MD5
3ec02b21a110e535bc5a81273da8a9a7
-
SHA1
48104b46e6ef5e91c3f12a061bf03435a21c49b7
-
SHA256
43b8e1192a35994f1dce19d11d9cd2327eb164188227e1aeb68587ae529f1701
-
SHA512
dc33921b28a702780293a0138e374c36f3c87d7219435d0443c75ec612cbfda0a85564e4477bf9b51cb402c7de34becf9888f90c68f900db7116ce60ec3dc600
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc40J:wFWPClFkJ
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b8e1192a35994f1dce19d11d9cd2327eb164188227e1aeb68587ae529f1701
Files
-
43b8e1192a35994f1dce19d11d9cd2327eb164188227e1aeb68587ae529f1701.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE