Behavioral task
behavioral1
Sample
b61243e93ea2b61e28e7b3c3eb8d4a31d0443ad8ae9fb2a072ababdbdded93c6.exe
Resource
win7-20240729-en
General
-
Target
b61243e93ea2b61e28e7b3c3eb8d4a31d0443ad8ae9fb2a072ababdbdded93c6
-
Size
1.8MB
-
MD5
1d0d57a6b93af7ced28c195ceeffad51
-
SHA1
d324a74e223b2de012be4aeb84e58640740508dd
-
SHA256
b61243e93ea2b61e28e7b3c3eb8d4a31d0443ad8ae9fb2a072ababdbdded93c6
-
SHA512
861da9311a32ddd84cc65c538a4b3a6c18106b5bbadfc4a517aa2a4b2bf720b7487678c64b712b7ec64b7f659b8cbcb0f36b5fe9606a235fdf72147155d39ae1
-
SSDEEP
24576:oezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpv3zqxG2/yJhrhScI7R:oezaTF8FcNkNdfE0pZ9ozt4wIlfw
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b61243e93ea2b61e28e7b3c3eb8d4a31d0443ad8ae9fb2a072ababdbdded93c6
Files
-
b61243e93ea2b61e28e7b3c3eb8d4a31d0443ad8ae9fb2a072ababdbdded93c6.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE