Behavioral task
behavioral1
Sample
fbfd3b36fe27d514d7393e86a49f13622a926d660a467d8db9474f251f8163d0.exe
Resource
win7-20240708-en
General
-
Target
fbfd3b36fe27d514d7393e86a49f13622a926d660a467d8db9474f251f8163d0
-
Size
3.2MB
-
MD5
892fe7dc69cc6fc44b98b3000194fa05
-
SHA1
82df19dbb357662cb27d167e270a16d85fde5a15
-
SHA256
fbfd3b36fe27d514d7393e86a49f13622a926d660a467d8db9474f251f8163d0
-
SHA512
ece78c70120ab5076ea37c3e712116a6987a0a55c63c5256668555d25582b90c135c82e65d9611d1f10eaacc230125a12f262e1e695498054f642be6e72f2b00
-
SSDEEP
98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWp:7bBeSFkN
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbfd3b36fe27d514d7393e86a49f13622a926d660a467d8db9474f251f8163d0
Files
-
fbfd3b36fe27d514d7393e86a49f13622a926d660a467d8db9474f251f8163d0.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE