Static task
static1
Behavioral task
behavioral1
Sample
e-dekont.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e-dekont.exe
Resource
win10v2004-20230220-en
General
-
Target
e-dekont.exe
-
Size
1.1MB
-
MD5
eeb02dd77ffd84adda309aaaff558342
-
SHA1
9c4af9c84ef7512226fe44a109ba0a93ed0c5a92
-
SHA256
81ae9bcfd9a7d0e3673540a364cb8b232d857c29a84619d174a8c879d44f3604
-
SHA512
c3c51e1e0df250e7816db2e3a615cff46d75b303e7954d81e459d8460cf06d20a4df09ef7c59a9d6434229d908fae76fe8be99ef73c0951f045908df296da5f5
-
SSDEEP
24576:WuOZ6wGkB+e9uf8SOV6y18aJw+p2IIHp:ROZ1bXGp
Malware Config
Signatures
Files
-
e-dekont.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 807KB - Virtual size: 806KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ