nova_installer_x86[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nova_installer_x86.exe
Size

829KB
MD5

ca94724d928fb0820b68869cd6d3977c
SHA1

800d13e39d12e1a4d7b8c957c3d0def392c90c56
SHA256

170cabd4b783d019ebf188314db82ddbca802d16d514cd1048a9b2415b8b4a1c
SHA512

51fd1d1cd0a4fefd4f030770992be631fe53047f55ab7c172bf71c8f4760e7a799c2d87ebba6458e2ded84f9f2260c48280865d8e181c9c5b6a00393261f5ebd
SSDEEP

24576:olmxnKjL7qRURTZ7ZooNtqG2pSOjwUfn:amg3x5ZooXq3pB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nova_installer_x86.exe

Files

nova_installer_x86.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

wT?O ]y;
Size: 793KB - Virtual size: 792KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ