Nova Paid[.]exe | Triage

Sharing

General

Target

Nova Paid.exe
Size

11KB
MD5

af01ce81d4ab7563effd17927d6ebac2
SHA1

c26dc6c6739f25826f2f095079142074d622638d
SHA256

207c9fcb3d27479e760966b306e799b4a2a12b15716c3232aba846532da3bac7
SHA512

510a2471e90fa0e4f47c3a6218b32fda8fb4106cb157757eea2c77e2e60929b8940c6a3731515ce952afe25fe401cd7157294e251a8dee68caf92320cd8080e6
SSDEEP

96:gLkT0+4l002iKK5pQ9rmTohygkRZJte8K3dGcRJDfsjqIxbMjTH7HP+qDcFRVX2x:Ok/Mk3ygkT3e88GiIj1ojDDWqoVX2Oo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nova Paid.exe

Files

Nova Paid.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\moret\Desktop\seroxen.lib\obj\Release\seroxen.lib.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ