NER[.]exe | Triage

Submit
Reports

Overview

overview

Static

static

1

NER.exe

windows7-x64

NER.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

NER.exe

Resource

win7-20230220-en

remcos maly 2023-host persistence rat

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

NER.exe

Resource

win10v2004-20230220-en

remcos maly 2023-host persistence rat

windows10-2004-x64

10 signatures

150 seconds

General

Target

NER.exe
Size

1.3MB
MD5

15932ff2fd4d25d706112766560db0be
SHA1

58f23f95ab0b98c90cc532479c584d3e920490b0
SHA256

9d0382b562197eae6d94c939b20facd7614b097cb8ad53bf135818d6b854a785
SHA512

cc00da25f8b0980a5721b7d7b9c1cdfa7c203fe52a43587c3ff54e5d836fd54ec13a41aa28b4655724c56b8b20c60248ee96572a3a65c899256a7ff996942bdd
SSDEEP

24576:sHF0bvDMniKoyitZ2OGBhm9et9pBtV7eSgO5v0jMYuyDwVEXjByQdURaA3T:qFKAnzoyI+h4ugW/YuyDSEzORfT

Score

1^/10

Malware Config

Signatures

Files

NER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy