Resubmissions

08/01/2025, 14:54

250108-r94rlstpet7

08/01/2025, 14:07

250108-re1fpsvpfl8

General

  • Target
    Nursultan.exe
  • Size 16.1MB
  • Sample250108-re1fpsvpfl
  • SHA256 f8fba45ce7e00b527540f96707338b7adc8ee5ccc23924145a155fdd87d4ce2f
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • Nursultan.exe
    .exe 16.1MB

Nursultan.exe

  • IMPHASH 72312fcd642542e68588986618bd5844
  • SHA256 f8fba45ce7e00b527540f96707338b7adc8ee5ccc23924145a155fdd87d4ce2f
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
e7:a2:00:82:c6:4f:b5:22:e3:54:b5:1d:fb:fa:79:90:0f:e3:e9:a9:61:99:f3:77:ca:bd:6b:8f:46:5d:4c:e3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=IP Kayukin Gleb Anatolievich,O=IP Kayukin Gleb Anatolievich,L=Izhevsk,ST=Udmurt Republic,C=RU
Chains

Oct 16, 2024

Minor OS version
0
Major OS version
6
Entry point
18909825
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths