Behavioral task
behavioral1
Sample
141295f23de8bde19a59565ea1eddac0N.exe
Resource
win7-20240705-en
General
-
Target
141295f23de8bde19a59565ea1eddac0N.exe
-
Size
2.0MB
-
MD5
141295f23de8bde19a59565ea1eddac0
-
SHA1
dbc81c86b625d4352aac6b922064ff0165389e73
-
SHA256
43adf64300fc02c3de07d04d6ec41cefe3c020666f0fb45dd485d126a8ea84e1
-
SHA512
0227ac806f877a1ae50eb2d4d3b09b9976d49d4bc65247a68f32985740f57a36173db544612882488ee86ffeaec0928d7d3b247eb43d155078e0a8adec2b8fc1
-
SSDEEP
49152:oezaTF8FcNkNdfE0pZ9ozt4wIlMmSdbbUGsVyyBmT:oemTLkNdfE0pZrE
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 141295f23de8bde19a59565ea1eddac0N.exe
Files
-
141295f23de8bde19a59565ea1eddac0N.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE