NursultanCrack[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NursultanCrack.exe
Size

416KB
MD5

827eef567d3d4ec302dd98350fd771ae
SHA1

8d7e6e357ef597fc6e4dc6224e45fd6b1a98b947
SHA256

b6cb0e2c02b368891549eeb9c7e2daad0d36daf24431e6aa7736a46aac6bb8ee
SHA512

4cc3e639776c02783b224187a32b827988b1d79c560af93549d72d12fd7aac0eae733e67009dc481e70fa857ee663437cbfc8211a6e1d579339963f8dad89368
SSDEEP

6144:fLxUmsjKnRZ+S9/MUXme6VlWT8b9LJ9vGXlZlGPqO9kb9KZ+/M5nO11S8:fDsj2jrWPVle8h/elbOhBuM5no1S8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NursultanCrack.exe

Files

NursultanCrack.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ