Behavioral task
behavioral1
Sample
NEAS.d6832450a356d2fd3846fd0c4b8ab2d0.exe
Resource
win7-20231020-en
General
-
Target
NEAS.d6832450a356d2fd3846fd0c4b8ab2d0.exe
-
Size
1.6MB
-
MD5
d6832450a356d2fd3846fd0c4b8ab2d0
-
SHA1
711abb0c3b94da69348721cb5c63aa8f3f74eb90
-
SHA256
ef4398e3358b8c5a9aed4a81f49f2da0f71f178b07ff9fb73ddc60e601d7eec9
-
SHA512
3a3632e2e126b612e156a5a8796ce59027ad8ba6969ff331e6f6507fecaaf8cc42523b685f50b29b462190aa9f5c4f523b1b60c93cb32f0a1e3764410a6af40d
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIXI4O/Qdhai:BemTLkNdfE0pZrl
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d6832450a356d2fd3846fd0c4b8ab2d0.exe
Files
-
NEAS.d6832450a356d2fd3846fd0c4b8ab2d0.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE