SecuriteInfo[.]com[.]Win64[.]CoinminerX-gen[.]3295[.]9388[.]exe

General

Target
SecuriteInfo.com.Win64.CoinminerX-gen.3295.9388.exe
Size 2.8MB
Sample240909-e6jaaasank
SHA256 7dc50338d476cd0dfdfcf48dc7dbff682d6d04458c6ce2808f35779606576532
MD5 43f595460b2fca77561c63e8a80178dd
SHA1 ce644189a561c6a2a6f6f6656fc6a46e006d1d87
SHA512 3df9666eaeb9bcf270608380d7889c61787f31a3d54c764c3685cc7116f9f7c54913f094213e7b4f80cffa7bc245d14f0119eb36d8318f728218ecf24f61c2bc
SSDEEP 49152:Ttx3zeCE99IyWGKUpZTGttu7FfdKRiIsA37SWje3b9VJMsdnee6GrhpIfI9umCzY:TrM9BpYttuBdK4FA3mWMbfN73r0fCulc
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win64.CoinminerX-gen.3295.9388.exe

SHA256 7dc50338d476cd0dfdfcf48dc7dbff682d6d04458c6ce2808f35779606576532
MD5 43f595460b2fca77561c63e8a80178dd
SHA1 ce644189a561c6a2a6f6f6656fc6a46e006d1d87
SHA512 3df9666eaeb9bcf270608380d7889c61787f31a3d54c764c3685cc7116f9f7c54913f094213e7b4f80cffa7bc245d14f0119eb36d8318f728218ecf24f61c2bc
SSDEEP 49152:Ttx3zeCE99IyWGKUpZTGttu7FfdKRiIsA37SWje3b9VJMsdnee6GrhpIfI9umCzY:TrM9BpYttuBdK4FA3mWMbfN73r0fCulc
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12825920

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths