NerestPCFIX[.]exe | Triage™

General

Target
NerestPCFIX.exe
Size 3.4MB
Sample260819-ssh91sdk31
SHA256 f1afbc7c73f92140ebf00708d39bd73060bf5c32a7ec48d2c3f167bfe660c779
MD5 a909f680456b92fca321297f082d22e6
SHA1 398a8e07e756289a4e1dbed201602050901410ec
SHA512 0440e5285768a94e26d3e8b65bf0cce2f7dad876c0e0c13b8a43dab262b8f191bad4817ae259f28e51a17efc602a0307fac3483691b2f5af72e2ccf1267db61a
SSDEEP 98304:or+18PgOzBYWiQtqkepdn3lKHnk2LCc7Numhv:NxK6o0n3lsn3Z7Nth
TLSH
T116F5333C370AE81DEB941A73E7F42788D33E521C93243D67A7BB961611C8A8634BE54D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NerestPCFIX.exe

SHA256 f1afbc7c73f92140ebf00708d39bd73060bf5c32a7ec48d2c3f167bfe660c779
MD5 a909f680456b92fca321297f082d22e6
SHA1 398a8e07e756289a4e1dbed201602050901410ec
SHA512 0440e5285768a94e26d3e8b65bf0cce2f7dad876c0e0c13b8a43dab262b8f191bad4817ae259f28e51a17efc602a0307fac3483691b2f5af72e2ccf1267db61a
SSDEEP 98304:or+18PgOzBYWiQtqkepdn3lKHnk2LCc7Numhv:NxK6o0n3lsn3Z7Nth
TLSH
T116F5333C370AE81DEB941A73E7F42788D33E521C93243D67A7BB961611C8A8634BE54D
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12922736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths