novacheatud[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

novacheatud.exe
Size

43KB
MD5

2161dd34f378bad359892d53b4710169
SHA1

7f0dce303e904e5a5b06466433538c830f233d73
SHA256

010b395dfe9730c9af7af075012cee4c6e6c63b8110c63b42ad6fed0ac8872bb
SHA512

8dbed0dc28eacef23e3c89fadafdcb49caaea3f16c79fd43d0b38e9535d436690406c4b0da159b5ddcea954a47be300dc28a09594892bc73955419a92dfbc9ad
SSDEEP

768:T5/jqPyqisr4dGirXAHg5rbWCVs6ZC9O7Sd/bDXNJb7bTDaSo1IV27F:1Nqwo2s6ZC9OKjBJb7bTDo1IgF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
novacheatud.exe

Files

novacheatud.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ