Behavioral task
behavioral1
Sample
NEAS.132bfce4723a8037b6ef5a7e2de143d0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.132bfce4723a8037b6ef5a7e2de143d0.exe
-
Size
1.8MB
-
MD5
132bfce4723a8037b6ef5a7e2de143d0
-
SHA1
2efbcdd324c3595908e9e7be23ca526fbb33b1e9
-
SHA256
d995519756c1f7c2f6faf8c68aff3fa6ecb1b0a330cdb85d988ed3b8b503e580
-
SHA512
97839bd112b318ac5c6ec51b0189b7243ae358dfe48bc37d0b3b2c1b6e667d6b1cf2a3b714aa32c0dfae6716e70e102d0ccdb7c37126fcc35ebfc29b726aa3d5
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIXIqndvMjn44c2HhXM:BemTLkNdfE0pZr1
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.132bfce4723a8037b6ef5a7e2de143d0.exe
Files
-
NEAS.132bfce4723a8037b6ef5a7e2de143d0.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE