NINOVA - SHIP PARTICULARS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NINOVA - SHIP PARTICULARS.exe
Size

704KB
MD5

e099d19e9ff6a0d25d33d3d1bea39114
SHA1

5dcaaac08be59b02e8b22e409ab49789a6e4a53d
SHA256

aff3c6ff3ee41b9772f8e47332a9a6a4681c65b5fa0abb51a621d628fe2f89bd
SHA512

7c0e675374657fcaa5f1c3968117a77f4efeff58bc171a0610c23c0cb9b0e8a7805f2eb5136ea56743022ae1ca3041d5df9e5f872a443834e8ccdc9b69c6e0aa
SSDEEP

12288:0BScfJw1UbbkyTdYUXFUM6mABYABHyod0NV1AtADWIEQ0bMqfJ:GBwu9OHmCYAVkoNdMqB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NINOVA - SHIP PARTICULARS.exe

Files

NINOVA - SHIP PARTICULARS.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 693KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ