Behavioral task
behavioral1
Sample
NEAS.d239cd2cf61a2bb6c63745a67d2c7690.exe
Resource
win7-20231025-en
General
-
Target
NEAS.d239cd2cf61a2bb6c63745a67d2c7690.exe
-
Size
1.9MB
-
MD5
d239cd2cf61a2bb6c63745a67d2c7690
-
SHA1
48602f2cbc27757284e14af00d18cdabb90d7723
-
SHA256
d12ad8460fa41e284a3d4eb1c5e874025c5e8bd2c443dbec31144a373cbb1b1f
-
SHA512
005cdd7da613ed467baaa1e9794d019448dd321954b0f0811275083d4817e2714ec7b16fb637f5f123f3d0f629a59bebaabf073a128b4b0a45db17f82ff46530
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIlMmBg4IVTa/3:BemTLkNdfE0pZrB
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d239cd2cf61a2bb6c63745a67d2c7690.exe
Files
-
NEAS.d239cd2cf61a2bb6c63745a67d2c7690.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE