Static task
static1
Behavioral task
behavioral1
Sample
Nursultan Alpha Client.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Nursultan Alpha Client.exe
Resource
win10v2004-20240709-en
General
-
Target
Nursultan Alpha Client.exe
-
Size
2.9MB
-
MD5
97feddcf4ed5c42bfaba5761597b8a00
-
SHA1
72ee0bd71ecfbf76103efd8f0bc32d386d91fdaf
-
SHA256
ba61b838a6b159d1d8f6fbbd1c80016fe7277225d1847de9ae50d0d83b29f9f1
-
SHA512
89174664335f8211626ee78322724939a4144ec79c6e5602fbd78ca062cf301d92c735c97beee68c68036bcf4762552792dd443c1cfd2ce1549cad0a56a27d1d
-
SSDEEP
49152:1xQQovM4NUTzrWlUMtHE772hZD9gtGIOSzAYpk8xKFxNWMjZoMku:1xgM4NOYt0iK8IOScYpP8Wcoa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Nursultan Alpha Client.exe
Files
-
Nursultan Alpha Client.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ