NursultanNextGen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NursultanNextGen.exe
Size

88KB
MD5

3aebb860d2d18d5f318bf313859f8b99
SHA1

482a359d64aa96c7337507dadd4fd7b8309cdbd0
SHA256

4cd702b7f25ec9dfda7ad3769c154ab0f057a2ef68a470d54073aeb51821d101
SHA512

c939ea7360796cff26693c4931eac431039299d3ef24260df323eef1205627ae953875fedf3fa71b46bdb5a29dd934d2ad444724bf958fe27acfde46b068bbe2
SSDEEP

1536:W4pz4phs4sIUwrnBMIOlxTgulRl6v5q6lUZaTdwzhR8fE42iW:W4cXnsIUwrnyIrmlegqUgTd6R8fOiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NursultanNextGen.exe

Files

NursultanNextGen.exe
.exe windows:4 windows x86 arch:x86

Password: 16062010

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ