Static task
static1
Behavioral task
behavioral1
Sample
e-dekont.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e-dekont.exe
Resource
win10v2004-20220812-en
General
-
Target
e-dekont.exe
-
Size
1.2MB
-
MD5
c2aa18f81381790d756c05186d43fe7b
-
SHA1
2c0e88f829c8e508eebb8a111b6ed9a899cf7a65
-
SHA256
75bacff6d2d5eb004e04e769d940b82708b9ce976903ff7316aa19b2fe6e794d
-
SHA512
afb0fd5fe08b9d7045d3ea8b6daa23657680b723977178c31645345e2e06c67fa3540dcbb6b8ff7bec8f1ea2a3a206f4028d4bb8416d96ac3c7a011295406440
-
SSDEEP
12288:WDckxKYNy6BKJNO3axk7ie7msw3tivgkgK4HTN:Dfv6gpgie7u3ggk
Malware Config
Signatures
Files
-
e-dekont.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 970KB - Virtual size: 969KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ