Nezur[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nezur.exe
Size

2.2MB
MD5

cbfc31b82bb14bcf54d1410ad6266053
SHA1

9cd15f399b6f7981db63a43b4372ccbf39b5c668
SHA256

802763db724750a951a1c9b1f69ef2df869cc78c8f2fe1eec1dabd6d7c646761
SHA512

5701997d0a26fd5cc970c026a0c55fddd4cb29e0551de6ef1a8ada6132ee2bfeb81e1b8429ddbda0d815fa96843e226a37375ce386e85ae0356c21c8ec89d994
SSDEEP

6144:7xN7BlG+vhpy3gEOusATgSjiuKrgn5gGA2LLmx9AZZvuEa3:dHj3EOzS91qKj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nezur.exe

Files

Nezur.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 317KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ