Behavioral task
behavioral1
Sample
NEAS.be3a4093d2b727d927b07a31cb1d7100.exe
Resource
win7-20231020-en
General
-
Target
NEAS.be3a4093d2b727d927b07a31cb1d7100.exe
-
Size
1.9MB
-
MD5
be3a4093d2b727d927b07a31cb1d7100
-
SHA1
3726e48afbef1c4114561b3374529a2a0f96b093
-
SHA256
5feb367b887c8fbc5d0216bf8e17942f30e25e4fdc19d441276c92178163f7e8
-
SHA512
d7e8b6947e36f2c724a0d3d6a9978854f6c79ecdd8ce8897a672ad8c75f4331dc71843fdae61d3191d9f634279d90d7718a4816f9838230c799323569061f010
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIlMmGo9MIG:BemTLkNdfE0pZro
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.be3a4093d2b727d927b07a31cb1d7100.exe
Files
-
NEAS.be3a4093d2b727d927b07a31cb1d7100.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE