Static task
static1
General
-
Target
Nursultan.exe
-
Size
13.3MB
-
MD5
f6c0feffe54fa282026b99660ee2f36e
-
SHA1
1df776d7ee9fca88331dd7451704811ffaaeeca9
-
SHA256
a8e15ff3f763f5f153b46ba983847396c121e055942473863aaf40368e62c198
-
SHA512
bb14c616b5e0dd6259e24ce8a9c2e6f5fd5e40518c8f13a200b52330c56465620460d24b2f820b34615b9120fbeb8d366bfc80b7d6ab88d8adfcf3e7e19afe23
-
SSDEEP
196608:nB2xmjsScoe5Q1QmUrctfXJqsg/WAGlBE32no2qouSgiKB0nOgM8pg50d1/Kc6IX:imIFTmUIwsgCm3t2GyKG5jMtIQvA9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nursultan.exe
Files
-
Nursultan.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13.3MB - Virtual size: 13.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ