General

  • Target

    images.scr)

  • Size

    4.5MB

  • MD5

    32f21ab8cf9b96e8ba86395a0edc2e4f

  • SHA1

    2a5b3c07e32b3b2b0c1ef33a10685027703440ec

  • SHA256

    20389c7d417ec512e18bb246a693ce37e041390b6cf1cdd5dca0728b709f910d

  • SHA512

    d7fc84e52ad671f55f07bd46a06ea3b881606f21c457e21d50bc45e08339926d13890792503d3bca46edc866f7a739cf7b845f0182ed18bcdb70bca1db011f6c

  • SSDEEP

    98304:DMUaI9OMzejqikpYbAI7XLyhq6IvorAJKn6kD801cgl0+BhV1C8q0DBAvD:I8Oxy61y6g38ScglnBh20FMD

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • images.scr)
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:6 windows x86 arch:x86

    2e4d94706c699d2da474aa823430b9a5


    Headers

    Imports

    Exports

    Sections

  • $R0/Data.bin
  • $R0/NsCpuCNMiner32.exe
    .exe windows:5 windows x86 arch:x86

    605c19578abec75fc74907473f752c23


    Headers

    Imports

    Exports

    Sections

  • $R0/NsCpuCNMiner64.exe
    .exe windows:5 windows x64 arch:x64

    de374bd0d52433ab46e2fe7e4daf1ffe


    Headers

    Imports

    Exports

    Sections

  • $R0/NsGpuCNMiner.exe
    .exe windows:6 windows x64 arch:x64

    6df56667a363c9a6dd7a435abe9a4886


    Headers

    Imports

    Exports

    Sections

  • $R0/load.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:6 windows x86 arch:x86

    2e4d94706c699d2da474aa823430b9a5


    Headers

    Imports

    Exports

    Sections

  • $R0/pools.txt
  • $R0/tmp.ini