Behavioral task
behavioral1
Sample
dd9d50a6b26a3285263cd3c0eee3b190N.exe
Resource
win7-20240903-en
General
-
Target
dd9d50a6b26a3285263cd3c0eee3b190N
-
Size
2.1MB
-
MD5
dd9d50a6b26a3285263cd3c0eee3b190
-
SHA1
7f32f046f6270880d3affc65c4ecd1b1c170bf62
-
SHA256
96b67e8e0340721b19a39afbbe7bf9a64bc40fc4d08f25c330f2e5ecdbae52ad
-
SHA512
0ba810ae26227f903c692f4ceb35f2b59971cd83b13ad5643de236a5cca63a64130a088fa262e87ef528df49d919a81de55d1384efa130284ab99b2311ba41c4
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzJlk9:w0GnJMOWPClFdx6e0EALKWVTffZiPAcY
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd9d50a6b26a3285263cd3c0eee3b190N
Files
-
dd9d50a6b26a3285263cd3c0eee3b190N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE