Static task
static1
General
-
Target
Nursultan (1).exe
-
Size
10.0MB
-
MD5
f39f4172656ebffeeaa7688db879991d
-
SHA1
a8087dc9047c9afc1af2b210f4c66d33ef9b05e3
-
SHA256
9170d771496eaa1f69b00bd194536e10dbfbca98333e73035283c9518ea200b2
-
SHA512
cd335f12e041c471a1be5c9783be9c94ad2dbebc4b07d4e458be6dcc40ac55005b9f6275431ccb1f6ea4fb4a15169122778c2149f01151ee0ddbc5f8c56bc676
-
SSDEEP
3072:tvj59y5+HkUHFrt0KtcQ40J7eD7t7DQTpzMs4zk2R4FZw:9LEUHFrt1t+D7tvQTpzM23
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nursultan (1).exe
Files
-
Nursultan (1).exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ