Behavioral task
behavioral1
Sample
24182ce4b823ad44061b8a76f7ecead734cbfb897d9cd83f639a7295afc5aaebN.exe
Resource
win7-20240729-en
General
-
Target
24182ce4b823ad44061b8a76f7ecead734cbfb897d9cd83f639a7295afc5aaebN
-
Size
3.1MB
-
MD5
ff1c7d224b98c445580700a8f901d640
-
SHA1
135642203c1715a9d150dcc7665d7f31b81c48bb
-
SHA256
24182ce4b823ad44061b8a76f7ecead734cbfb897d9cd83f639a7295afc5aaeb
-
SHA512
6c0100618ee691d5a53ab3484ac1e27c3d530c1cc760c0ee4dc10f7a33b15fd455f28be0beb0a0cf4e63a9503deccf247489beb0be4c3803527dc52f8415d2c9
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc40B:wFWPClFkB
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24182ce4b823ad44061b8a76f7ecead734cbfb897d9cd83f639a7295afc5aaebN
Files
-
24182ce4b823ad44061b8a76f7ecead734cbfb897d9cd83f639a7295afc5aaebN.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE