Behavioral task
behavioral1
Sample
ddfd4d20a59f9ef15d98231ddb9db9a6314aa575a516a9245b459b6ae33f30ee.exe
Resource
win7-20240704-en
General
-
Target
ddfd4d20a59f9ef15d98231ddb9db9a6314aa575a516a9245b459b6ae33f30ee
-
Size
2.8MB
-
MD5
b75c6b498b7ac8943dd766eb77ff18c2
-
SHA1
bc01fe9f8724a0f90d5a28f9d6b32a36f1fed17e
-
SHA256
ddfd4d20a59f9ef15d98231ddb9db9a6314aa575a516a9245b459b6ae33f30ee
-
SHA512
8f6a352411b797bb643016bd0ac22df2ff782d5a4c9d13b838a437ac43adbdf7ffb2b82b87fc98b2c1fd3aac88788121f274c4cd023cbaeb9c8fdabfce6fb747
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrMbtUrtO+:w0GnJMOWPClFdx6e0EALKWVTffZiPAcU
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddfd4d20a59f9ef15d98231ddb9db9a6314aa575a516a9245b459b6ae33f30ee
Files
-
ddfd4d20a59f9ef15d98231ddb9db9a6314aa575a516a9245b459b6ae33f30ee.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE