Behavioral task
behavioral1
Sample
NEAS.82767a57947d8dcf2261ce9bb6fb9200.exe
Resource
win7-20231023-en
General
-
Target
NEAS.82767a57947d8dcf2261ce9bb6fb9200.exe
-
Size
1.8MB
-
MD5
82767a57947d8dcf2261ce9bb6fb9200
-
SHA1
523b1938adc4eab2f9f180a2c4af3e9e80d4c3e8
-
SHA256
d2e47804e3f342e200b00e6acd0b47f9a5bd36f03c3def852c8e7c58d0748356
-
SHA512
159eaf8e47e5f2a2028ed7783814d592b121d25297fa50231a263db8f772b3a7849ada9f7882c0c323acb5fcac02f6df8675262f784191e6210b16bbcd0b4fb2
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIXSLOmL+2v0HH/A0uD:BemTLkNdfE0pZrG
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.82767a57947d8dcf2261ce9bb6fb9200.exe
Files
-
NEAS.82767a57947d8dcf2261ce9bb6fb9200.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE