Static task
static1
Behavioral task
behavioral1
Sample
Nursultan crack.exe
Resource
win10v2004-20241007-en
General
-
Target
Nursultan crack (1).zip
-
Size
25.5MB
-
MD5
bb66510badd72805792145efdeae31e5
-
SHA1
3500558542ae07522a4f4f85b920fc4d1c59bd8e
-
SHA256
c64c499aeaeca03cf24ed573edaabb4cfb9a69545963b073e559966bca63430d
-
SHA512
92f4bbd57a8194755e22a7b5488abe1bb21ed8d2fe5ffbcf16d2ede9d221a20e0173f438b52d7f3051b716fed3c4fcaaef394f7874122f9a085b0458fd5ff084
-
SSDEEP
786432:mwtkaAgdVeyiG5yWs8i6XrZvoc8xKdCHG:mraFdsuAWf3N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Nursultan crack.exe
Files
-
Nursultan crack (1).zip.zip
Password: 1
-
Nursultan crack.exe.exe windows:4 windows x86 arch:x86
Password: 1
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25.5MB - Virtual size: 25.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ