Nursultan Alpha (prem)[.]rar | Triage

Sharing

General

Target

Nursultan Alpha (prem).rar
Size

218KB
MD5

a7f591003cce59e27502d67c86991785
SHA1

786bf85374b6bca104d319cc063109e816e4f66a
SHA256

b6144ee112320cbcc476232f0b8bd8b12d24d825ea1ad16ee61e4b31f6e0c779
SHA512

70ac4f00277059ae82ebc5024060a7f08706cf7a0e8351a5f7e680debd53a6c78fdd95472e6320c0e8766f4f1b7df2b900a4f4c3ace73ecd89f8782e65bb7a7c
SSDEEP

3072:VqcC9NW8fWodHKci2A7Jl6QG8PO8omsPmOHgPjNaSRe+FwBuSRavrF/WLC9CcLJ7:+ffWkHs2A7J/n+my6ASk+FyT6rZx9/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nursultan Alpha (prem).exe

Files

Nursultan Alpha (prem).rar
.rar

Password: 2023
Nursultan Alpha (prem).exe
.exe windows:4 windows x86 arch:x86

Password: 2023

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1020KB - Virtual size: 1019KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
help.txt