Static task
static1
Behavioral task
behavioral1
Sample
e-dekont.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e-dekont.exe
Resource
win10v2004-20220812-en
General
-
Target
e-dekont.exe
-
Size
906KB
-
MD5
dea5ea4e9830ae8c67b096e21f011ee5
-
SHA1
cccd9a752bd4371808ed4f50fc40a69f9ceda0fd
-
SHA256
ca218e56143dfab73d7066f98227804de7098df11a79658794d00b5358f56f82
-
SHA512
7a4736667b0343fc185100d1c3341106751cccdbdadb27c38b894516bea5c15bc1a7a8a257b5331cca489a0648bfec0cfbc88f771a02b87dd7bf3b3ee4a769cc
-
SSDEEP
12288:L/3iutjRmmX88PnHlqpIbdoyXojwPNOihAGJcaGCBobE:L/RYk9EImyXoEPMihASGAobE
Malware Config
Signatures
Files
-
e-dekont.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 615KB - Virtual size: 614KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ