Behavioral task
behavioral1
Sample
552cb879bc7a9929a9793c5e5e664a10_NEAS.exe
Resource
win7-20240221-en
General
-
Target
552cb879bc7a9929a9793c5e5e664a10_NEAS
-
Size
1.4MB
-
MD5
552cb879bc7a9929a9793c5e5e664a10
-
SHA1
125fdb133368755c7f051313d3e9e2bb5d4c1f86
-
SHA256
7f8658675f7dbdb006b9232caad6be03e51a611fb6236e4e086175b03e2726b5
-
SHA512
d76dabb5e4ad23506601f86ddf56448fcc4d073a846a9ab81f4ca655fd615e2cfcfd5cc3d2d7235d0b741fa1bb561856456330f3fd9a5b9f5217d06bff226139
-
SSDEEP
24576:BezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpv32wTlvck3AWsu4Jseu/b:BezaTF8FcNkNdfE0pZ9ozt4wIXxeHNsB
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 552cb879bc7a9929a9793c5e5e664a10_NEAS
Files
-
552cb879bc7a9929a9793c5e5e664a10_NEAS.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE