Static task
static1
Behavioral task
behavioral1
Sample
CrackNursultanAlpha_protected.exe
Resource
win7-20240708-en
General
-
Target
CrackNursultanAlpha_protected.exe
-
Size
1.1MB
-
MD5
f208b1d1cb9a7b5d057003862b3b3b38
-
SHA1
9b18e812d8700845f714fc509c92c565765370b1
-
SHA256
257c49b8c35795a21b11b2435fc208671704e42317699d484e4e5423ac971f4a
-
SHA512
af30c04e93ee3a13e1a318465bc2c5c9e0b5a5fec7c0f5724733e8af5f86b5cd89b106a1ebd2df654f579426b64dc7c617e98940ccd3ff870a15a074e9b89ddc
-
SSDEEP
24576:Ux4dJBcMkReu/9RkK/zp2+sXiwjO8X0zk3bFHu2knrrstvrQu2uhBgYZ:auZMeC1/l2HXiQyk3JCnrwtTQLgB3Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CrackNursultanAlpha_protected.exe
Files
-
CrackNursultanAlpha_protected.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 921KB - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE