Static task
static1
Behavioral task
behavioral1
Sample
Nursultan 1.16.5 .exe
Resource
win10v2004-20240611-en
General
-
Target
Nursultan 1.16.5 .exe
-
Size
13.4MB
-
MD5
304f17aae858ce00993564d09708e1e5
-
SHA1
ec56eddc59195f21abdda7faad19bd0a24586c4a
-
SHA256
81767d992cd769c3b78adbb5c80ebc81328fc05368454200d7f313a41f54c682
-
SHA512
d13e182ba5ceac5cd9377d81af5818c0a3cfbe29eeb5d9beee1c1d3415ca0b57f31ccdf65cd3b215bedbbe0aa1789ce871b3a96af14110c99e37ab5055357941
-
SSDEEP
196608:6R2xmjsScoe5Q1QmUrctfXJqsg/WAGlBE32no2qouSgiKB0nOgM8pg50d1/Kc6It:rmIFTmUIwsgCm3t2GyKG5jMtIQvA/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nursultan 1.16.5 .exe
Files
-
Nursultan 1.16.5 .exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13.3MB - Virtual size: 13.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ