Static task
static1
General
-
Target
Nursultan.zip
-
Size
217KB
-
MD5
86fe8178d8df9d23afbbf47e5b21f5f0
-
SHA1
106ba426a9739b6320724737cffaa14b5e1d2f2c
-
SHA256
c503ac57785984abc5440e07c0fa2c16eb83b33b56fcdd232797285e712a8fb7
-
SHA512
6216d9a7dd091a8349a4706e3440e273b17c1a833845973056ef78f3a7845dbbd1d8fccfd57cd508c0a80ba548b607b1bfdffc4594ced7176d5a080370fd31a5
-
SSDEEP
6144:zAW8AvR3auno/wHVB5ntv+Vmnu4k6WqEgs6Qe:XRRoCVHR+Mnu4sqHs6d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Nursultan.exe
Files
-
Nursultan.zip.zip
Password: 123
-
Nursultan.exe.exe windows:4 windows x64 arch:x64
Password: 123
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ