Behavioral task
behavioral1
Sample
NEAS.f5e788af288987111fadc728c9e5a2c0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.f5e788af288987111fadc728c9e5a2c0.exe
-
Size
2.3MB
-
MD5
f5e788af288987111fadc728c9e5a2c0
-
SHA1
48fcc6886d96ef76dec188f2096df83a9c4e19ad
-
SHA256
32b2f3c8ca5556613b8db0c4a0fa81145a773a90b68c4592623c15089fbe37e8
-
SHA512
669c013e9750fc9d51796a433890ca87693d1aea0a1df16d42d2c93c0d4b67c867cadfed5aafb552ae7f31829041225292d65634172b246e091411cc1f70dfdc
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+A8Jh1Aa1dFbWkA2m+O9S:BemTLkNdfE0pZrn
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f5e788af288987111fadc728c9e5a2c0.exe
Files
-
NEAS.f5e788af288987111fadc728c9e5a2c0.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE