nova[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
nova.exe
Size 1.6MB
Sample260705-176b4aby3p
SHA256 0ce3efaaaf3925401567cb3ef934409abeb116f0c3d32493a5f8d27143961012
MD5 3f80357751a93f91017ac0f109bbe3f0
SHA1 a4583d29ac216fb39bad0f6f3132c04bc56677ee
SHA512 42be3d6c4794863acf101e787072d0a62723d545893df9ad82742420b6f7ff3fc360769dd91b6f49644f4fea79f1f0a79ed24719923f5240cf995f31be2e7eba
SSDEEP 24576:g9DR3N3kmoPSnnrFb4PM4MYgLxEVyGLz:g33N3Looj4MYPVyGLz
TLSH
T1A675D0227906C473D5A9383905E5F72A36982FE13D33C943EF603AA2AD733891F659C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nova.exe

File Explorer

nova.exe

.exe 1.6MB

nova.exe

IMPHASH 8f8fac5bad696dc603d03578d11bd478
SHA256 0ce3efaaaf3925401567cb3ef934409abeb116f0c3d32493a5f8d27143961012
MD5 3f80357751a93f91017ac0f109bbe3f0
SHA1 a4583d29ac216fb39bad0f6f3132c04bc56677ee
SHA512 42be3d6c4794863acf101e787072d0a62723d545893df9ad82742420b6f7ff3fc360769dd91b6f49644f4fea79f1f0a79ed24719923f5240cf995f31be2e7eba
SSDEEP 24576:g9DR3N3kmoPSnnrFb4PM4MYgLxEVyGLz:g33N3Looj4MYPVyGLz
TLSH
T1A675D0227906C473D5A9383905E5F72A36982FE13D33C943EF603AA2AD733891F659C5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

71488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

HttpQueryInfoA InternetReadFile InternetGetConnectedState InternetOpenA InternetOpenUrlA InternetCloseHandle

shlwapi

UrlEscapeA PathAppendW

shell32

SHFileOperationW

kernel32

SetFilePointerEx GetProcessHeap GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage CreateDirectoryW ReadFile FindFirstFileW MoveFileA GetFileSizeEx SetConsoleTextAttribute FindNextFileW GetStdHandle WriteConsoleA FindClose CreateFileW HeapSize MultiByteToWideChar Sleep GetConsoleMode GetTempPathA CreateFileA CloseHandle FlushConsoleInputBuffer WideCharToMultiByte CreateDirectoryA SetUnhandledExceptionFilter FillConsoleOutputCharacterA GetConsoleScreenBufferInfo SetConsoleTitleA GetConsoleCursorInfo SetConsoleCursorInfo SetConsoleCursorPosition WriteFile ExpandEnvironmentStringsW GetEnvironmentVariableW WaitForSingleObject CreateProcessW GetExitCodeProcess FindFirstFileExW HeapReAlloc WriteConsoleW GetFileAttributesW IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead DecodePointer GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetConsoleCP GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType FlushFileBuffers GetConsoleOutputCP SetConsoleMode ReadConsoleInputW ReadConsoleW

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey