xmrig | 060c86347d0b7a82e205e9da15690940dc72548ecd838be802abd5425ed1b814 | Triage

Sharing

General

Target

060c86347d0b7a82e205e9da15690940dc72548ecd838be802abd5425ed1b814
Size

1.6MB
MD5

01342429690fdaed077eb24566c45937
SHA1

3ef8787125c53b4c79e23c8a2b261223a4224def
SHA256

060c86347d0b7a82e205e9da15690940dc72548ecd838be802abd5425ed1b814
SHA512

7764823d5c0a10e0f4d3d199eba59ae68b8d7cf07e5e6ea0701cb4f4f9a50a84d0d336e7223e42e04c3348c42f6d89b62736ee7aab10d1babbdf4526d457c036
SSDEEP

49152:GezaTF8FcNkNdfE0pZ9ozttwIRxeqwM62N:GemTLkNdfE0pZyz

Score

10^/10

miner xmrig

Malware Config

Signatures

XMRig Miner payload 1 IoCs

resource	yara_rule
sample	xmrig

Xmrig family
xmrig

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
060c86347d0b7a82e205e9da15690940dc72548ecd838be802abd5425ed1b814

Files

060c86347d0b7a82e205e9da15690940dc72548ecd838be802abd5425ed1b814
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 619KB - Virtual size: 619KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_TEXT_CN
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT_CN
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ