NovaCleaner[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NovaCleaner.exe
Size

10KB
MD5

a9df7e2d9f7a92c3f6b6a1450e0138a1
SHA1

b5d70ffafc37d6e77aaa6ea9139f035dd3a16ceb
SHA256

c4b2e5d633ea71a123e19a9088e819900f8a02adda1d49458f41d993ab212f0f
SHA512

76acb07ad12b513a1cc58a1ce8ac72bad29b5d8b049d62adb8407e9817fe5f10a997ff9434994bc47516ff90b7ed80630eb514338b325ed409a6c4490a62c40c
SSDEEP

96:U/WsN7AxNI6WCBjrO532QAnaUFiGRynopuR3WNt4Yc3qvUkZVkQzTgUvkGmLY2m1:U/zKLt1AfJ7R8KYc3qvUk0aMmk/m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NovaCleaner.exe

Files

NovaCleaner.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ