Behavioral task
behavioral1
Sample
NEAS.800df3cbbe6f67f4087761599e0d9fb0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.800df3cbbe6f67f4087761599e0d9fb0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.800df3cbbe6f67f4087761599e0d9fb0_JC.exe
-
Size
3.9MB
-
MD5
800df3cbbe6f67f4087761599e0d9fb0
-
SHA1
027e7ed462c371b947bfbba3cd6008ee210d19ba
-
SHA256
fba9e6dfd6225f2c0755c4eaf6439f7acdacb320cda6201f182741b43b400f36
-
SHA512
d927e918f8cf7b24817ef6097cc6cc8840cbeb7b512f74b8e7d07fe58060f10eba74cd6961fe9f4001b3c735d8bc881bc920610a26fd74660f1db3ae56731057
-
SSDEEP
98304:S0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjKX:SFWPClF
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.800df3cbbe6f67f4087761599e0d9fb0_JC.exe
Files
-
NEAS.800df3cbbe6f67f4087761599e0d9fb0_JC.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE