Behavioral task
behavioral1
Sample
NEAS.dd46d1f17da5de5d353273811edfd240.exe
Resource
win7-20230831-en
General
-
Target
NEAS.dd46d1f17da5de5d353273811edfd240.exe
-
Size
2.6MB
-
MD5
dd46d1f17da5de5d353273811edfd240
-
SHA1
c1609e2cbd536a08d3a50482ba5927b7c38a03ba
-
SHA256
6d2fafc74b36c7963f0e68ac0046d28e97d85d7f26a25caa850643315bf72826
-
SHA512
1cf4bf7fc5ac9c5aa895a961767fd909d112ce944e5e0c6b49ccb6d1332634fb1187a40bc18591a0c477c72f01eed747e4c4cc8b1b5e3b10293c4cab8e2d9c3e
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzBrL6T33dvCBx7:N0GnJMOWPClFdx6e0EALKWVTffZiPAcX
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dd46d1f17da5de5d353273811edfd240.exe
Files
-
NEAS.dd46d1f17da5de5d353273811edfd240.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE