51712c8ff230331c922c6d9c696b4885c58903ed08b4478859c91910996863e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51712c8ff230331c922c6d9c696b4885c58903ed08b4478859c91910996863e7
Size

673KB
MD5

3376816c9b7f97ab4c3a4764822821d4
SHA1

f9631f0b138d756fc4de25853b32c7e68fbbd72a
SHA256

51712c8ff230331c922c6d9c696b4885c58903ed08b4478859c91910996863e7
SHA512

41469f8955a0add0905f728305e1f2505c3117ae82333d99120d9fbf94565f8b5ee5a99fc52ee8339718302015c5d795ee7eeaabdb50f84dfb9548b1d208ec0b
SSDEEP

12288:HUDluegM86cFe81jJgCXKGZBg5OSIKQNJJ+5nPwBA5HnmdjXQYyWvwp9pXh53dZj:0D1gM86N8DaGPuOSI0IA5HnmxDW9r53z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nova new order.exe

Files

51712c8ff230331c922c6d9c696b4885c58903ed08b4478859c91910996863e7
.zip
Nova new order.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

qVyG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ