Behavioral task
behavioral1
Sample
NEAS.770b6859f62b5a3c69f36c22808df500.exe
Resource
win7-20231020-en
General
-
Target
NEAS.770b6859f62b5a3c69f36c22808df500.exe
-
Size
1.5MB
-
MD5
770b6859f62b5a3c69f36c22808df500
-
SHA1
ae83a36e1303739fab8d09abdc7bddf253f3c514
-
SHA256
6786c49bcd83bf01bac50e3148ceff1b26c7887a8155fd3f1bdab153e7f2932e
-
SHA512
1b811f330b7dda346c219b769ae868540e73095b696da73f754ff9a10ecb27330b21af000005e3d7ac97620da232ea1fa36a5b049d2eed9430020d24dca3d469
-
SSDEEP
24576:BezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpv32wTM4u/KazAbRjs2nJh:BezaTF8FcNkNdfE0pZ9ozt4wIXI4O/Qr
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.770b6859f62b5a3c69f36c22808df500.exe
Files
-
NEAS.770b6859f62b5a3c69f36c22808df500.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE