HWID Changer By Neos07[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HWID Changer By Neos07.exe
Size

899KB
MD5

26c1bfd41a14611d05d135411f01a37c
SHA1

289ef909e127c37f2b62d7506918e784bd9f8604
SHA256

a9dbf5243adfcdeb226ab66acd0f8aea7d74db8b874f07da830b04eef0eadd83
SHA512

b548fb55baf4ab2f13eeeb61c20466f0755d6aa3f040d89e9a0e7dc88523b7066819f2808982bd02d0a432a75866703a2bd22d9b84e946e33d78fc7e515cf99f
SSDEEP

6144:WNNNNWNNNNNNNNNHBPDpU4G+6D9ZNNNNWNNNNNNNNNHBPDV2:hJmSJY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HWID Changer By Neos07.exe

Files

HWID Changer By Neos07.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 531KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ