Static task
static1
Behavioral task
behavioral1
Sample
Nursultan Alpha prem.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Nursultan Alpha prem.exe
Resource
win10v2004-20240709-en
General
-
Target
Nursultan Alpha prem.exe
-
Size
6.8MB
-
MD5
5913d0f3d00230bafa5e20a0d05f207a
-
SHA1
abf8e993320b4a5e62808945360b818083c0eacb
-
SHA256
4f18af9508f5edebd5e3b0db68057ca07c208067c625f9af36a384c42f47d6c9
-
SHA512
11717ddaea97b8f398aa0aabda8ca575bfb9f1f0beeef4a079ec5cd3132895a7475c9ed2341b0879ffe2ab0c26db84cc507c884f9f05b1bd74363b9dd6010273
-
SSDEEP
98304:9GhdxW+CVGU1sgM+K8Hf5veW8tBZ2PWG3dqFh3gMADK2SLAlIJZRGRGKGnBckRw/:9kYreFBZmn3d+j2S5JqRGJzL26+iu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nursultan Alpha prem.exe
Files
-
Nursultan Alpha prem.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ