Behavioral task
behavioral1
Sample
c75cc6c271e2c8f1a0d2a03e8ae1fc70N.exe
Resource
win7-20240729-en
General
-
Target
c75cc6c271e2c8f1a0d2a03e8ae1fc70N.exe
-
Size
2.0MB
-
MD5
c75cc6c271e2c8f1a0d2a03e8ae1fc70
-
SHA1
f60a90f615fb43a14b3fe480931c17bd6fa6b28e
-
SHA256
8f0d8fa8910c471d3c1d39cecf477f5579e2b55ef776e4553a333e9293e33614
-
SHA512
2428d77b18170fbd9c80c59552bb27dd5577d438351e5515a0581ac9c44081e0226709921afb3b998c97657459f31f4fbf88a9750f290f7458e0e7d3c485b664
-
SSDEEP
49152:oezaTF8FcNkNdfE0pZ9ozt4wIlMmSdbbUGsVyyBT:oemTLkNdfE0pZrZ
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c75cc6c271e2c8f1a0d2a03e8ae1fc70N.exe
Files
-
c75cc6c271e2c8f1a0d2a03e8ae1fc70N.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE