Neles Changer v 1[.]0 FIX[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Neles Changer v 1.0 FIX.exe
Size

6.6MB
MD5

d93506e43c02aa72657291145519b313
SHA1

1d8e3d4796b0c3526ad76f69c005699d05b562a1
SHA256

e523a4e7db3da72afb0b5b40c17470c6b7d83c9fe849b94cd170a8a8867b0e12
SHA512

67ccf4002f6d5caa3290639bddc729daf24584ce92424992459d4d14a3a1e9bbf44ad14957aed6d5d6d6fbc480ee52a9d428ee25ef8d207c95291eb28be90ee0
SSDEEP

98304:aaj0Tu64YxCY/keMK/zgzM1t/Hm1NJV1mc+HK4h7T9XaX40SL2eSsTZ6/7skKL17:au0TGYxC9DqzX1t/aTmNq4FToXqw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Neles Changer v 1.0 FIX.exe

Files

Neles Changer v 1.0 FIX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ