Behavioral task
behavioral1
Sample
4360242b5fadafe2a5285b8128d0427f6039d5ae33292e2d68f9b4d6608b670b.exe
Resource
win7-20240903-en
General
-
Target
4360242b5fadafe2a5285b8128d0427f6039d5ae33292e2d68f9b4d6608b670b
-
Size
2.5MB
-
MD5
a965961d69220826fba354bfb7e3b8e8
-
SHA1
c16d78caa9c2d0bae84e0baafe28593ccebccf05
-
SHA256
4360242b5fadafe2a5285b8128d0427f6039d5ae33292e2d68f9b4d6608b670b
-
SHA512
0756ad549e29bf559f3e50a27e3c7526c1991add7f928e49c6f08f67b6af77cff0f0d0a55ee7b03c659eee80d95c53825c143a73b078b8cc961d2d04e7f39c6e
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzzxTMS8TgPiiVe:w0GnJMOWPClFdx6e0EALKWVTffZiPAcC
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4360242b5fadafe2a5285b8128d0427f6039d5ae33292e2d68f9b4d6608b670b
Files
-
4360242b5fadafe2a5285b8128d0427f6039d5ae33292e2d68f9b4d6608b670b.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE