Behavioral task
behavioral1
Sample
NEAS.10c9b4c783761d85399d4e8e2bcf0730.exe
Resource
win7-20231023-en
General
-
Target
NEAS.10c9b4c783761d85399d4e8e2bcf0730.exe
-
Size
2.2MB
-
MD5
10c9b4c783761d85399d4e8e2bcf0730
-
SHA1
f61621881e92fb7ad1fde7fd13b9b33cbf46764d
-
SHA256
cecf018c59a398d578e83c45a8fe5484b84b70f9de0b29fd2e07f763e9c5166c
-
SHA512
7751cc3d37bd59e7e753e398e125e4b4e75a0a40a0282e8b6ad382758c5bd188b2a2c3676bfe6ca05ffbd6c4a8c178935f07f84021c290e6516abe94ba5d93df
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+A8Jh1Aa1dFhWZu:BemTLkNdfE0pZrh
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.10c9b4c783761d85399d4e8e2bcf0730.exe
Files
-
NEAS.10c9b4c783761d85399d4e8e2bcf0730.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE