Static task
static1
Behavioral task
behavioral1
Sample
Nursultan Nextgen.exe
Resource
win11-20240508-en
General
-
Target
Nursultan Nextgen.exe
-
Size
462KB
-
MD5
868b277b120c928954c671c863d6884f
-
SHA1
62729969b44bd2f5a787fa54129a0dd829ae93e9
-
SHA256
674ee967fdc01596ad81dc9b25dd33d64effdc2d5fa589308ff5b9d2b75d3214
-
SHA512
3c5a99f143ea9f086be54ad5d489d2647664b5493526934fd0d6d7b51fffa2ba6099a465c537d891f7230c32891690e22fae9cd094e5df1d892621034ebbfe39
-
SSDEEP
6144:yMNCVV9MK212l08je6VlWT8b9UELmSdTwbn5igrWyb8elMKPr5m:yM2LZ21V8jPVle8BpcbndWDiMKPr8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nursultan Nextgen.exe
Files
-
Nursultan Nextgen.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ