Static task
static1
Behavioral task
behavioral1
Sample
E-dekont.pdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
E-dekont.pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
E-dekont.pdf.exe
-
Size
782KB
-
MD5
24a7aabcbce1a0c2b00bfab6630cfb67
-
SHA1
83d7e07f348bc6e70b2523831ce85cf93ca94403
-
SHA256
ce2518f0eddcfaa14c9c110d8df87b6aeeebabd851c53954a6702493be867338
-
SHA512
1956a7bb12cab247612d376d4058f6f8e8fd1d30d9e83e71b1d660ee302693fc20b88fb6f147f7b185626c515fac99a8729041d3af3faccd5494f377ab238798
-
SSDEEP
12288:40mZJbxpDFZ0z33QKyd9TNEAmcS3CAzpQWoTmQEr9bTAc/LMzYyTrJjSC:40oCwKW9+CSSAF2i9nArzNYC
Malware Config
Signatures
Files
-
E-dekont.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 780KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ