Crack Nursultan[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Crack Nursultan.rar
Size

2.3MB
MD5

32199f2c50b394484d0615c8fb34f7bf
SHA1

8a49e0611122a32fa0ebeb20f77f1d2aadcf5373
SHA256

2c6a5ba0be7580d1328ca04a463a8dd09287683ae8b5f7a78715f18529ae5074
SHA512

5b96209f644be32c7987ca0044e15bc69d81ecc0c04de23506e5b13b0edb374f3a0fa904900333ef39404ae1614241df877dadb2994e87d51dd6b0ac2ec6b2ce
SSDEEP

49152:5TqOKW5n10oKHBwNk8E9IFN71vPFhA9z2xqbWmSePBNlRyy:1KW5nybM3713bAwxFmjjyy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Crack Nursultan.exe

Files

Crack Nursultan.rar
.rar

Password: 2024
Crack Nursultan.exe
.exe windows:4 windows x86 arch:x86

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ