Behavioral task
behavioral1
Sample
89aee8e7d9d1279e80686f6034e34c1a9e0e2ba1563ff3b147016e7114d1c070.exe
Resource
win7-20240708-en
General
-
Target
89aee8e7d9d1279e80686f6034e34c1a9e0e2ba1563ff3b147016e7114d1c070
-
Size
2.3MB
-
MD5
057defe8c1800c7f18aaa3bd5361198d
-
SHA1
10a9f5ec82db8a282eeb322ce6861e07ca0fd5b6
-
SHA256
89aee8e7d9d1279e80686f6034e34c1a9e0e2ba1563ff3b147016e7114d1c070
-
SHA512
f7d5ddf9d7dd851083f287742bcec05f9b3fc17b346bf7d4739f2e081775e66cf7838d7424ebcfb9ba334faa2f94e984903ab18749a09c7db4d888f5c2f9d3dd
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzJuJZK:w0GnJMOWPClFdx6e0EALKWVTffZiPAcl
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89aee8e7d9d1279e80686f6034e34c1a9e0e2ba1563ff3b147016e7114d1c070
Files
-
89aee8e7d9d1279e80686f6034e34c1a9e0e2ba1563ff3b147016e7114d1c070.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE