Behavioral task
behavioral1
Sample
c6945f612c7146eaf72a2cac0b4e93498bc66d360d20d74322e2c631066cc32f.exe
Resource
win7-20240903-en
General
-
Target
c6945f612c7146eaf72a2cac0b4e93498bc66d360d20d74322e2c631066cc32f
-
Size
3.0MB
-
MD5
c1e93b5cd6805c5c7f9038b39ee6f3a9
-
SHA1
8fa70b1718e02eb4db27b85cc9ea2095dd0a491d
-
SHA256
c6945f612c7146eaf72a2cac0b4e93498bc66d360d20d74322e2c631066cc32f
-
SHA512
8c531a31398948fb2d094bf839522edb089e015b49c006b85e7c83d8237b4d16316636cebde3e6ff95a22bee78bea5333bd16ede8a1f8d4a0893cd6472797470
-
SSDEEP
98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWW:7bBeSFk6
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6945f612c7146eaf72a2cac0b4e93498bc66d360d20d74322e2c631066cc32f
Files
-
c6945f612c7146eaf72a2cac0b4e93498bc66d360d20d74322e2c631066cc32f.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE