Dekont_16[.]05[.]2023[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Dekont_16.05.2023.exe
Size 353KB
Sample230516-m85kasad79
SHA256 25d75cfcb97f4594d2cfde218c3d098ea70069e3cbbaa95c8f1bdba8d342ec36
MD5 752bdb32c281c4184e05a5466bdbd9fc
SHA1 42a973e881d6731564dcb83f4eba1cf88b60a5ea
SHA512 893bd7f67774ab9487d03cdc5aa93329e942eb88554c6a9d81422d19d700e056ecd546dde9080849552a83404d6eed8786c2214a49f338a29a09fae752ecd804
SSDEEP 6144:h4SUjhtXAU7j4v6UcAEvtPR8xBR+c5H9ByjuGHK2Tb+w/B5HQFtbSJPB7A9K+:6XAUYwvL8zR+c5HHyjO2nHvwFtbSZBMj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dekont_16.05.2023.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

Dekont_16.05.2023.exe

.exe 353KB

Dekont_16.05.2023.exe

IMPHASH e160ef8e55bb9d162da4e266afd9eef3
SHA256 25d75cfcb97f4594d2cfde218c3d098ea70069e3cbbaa95c8f1bdba8d342ec36
MD5 752bdb32c281c4184e05a5466bdbd9fc
SHA1 42a973e881d6731564dcb83f4eba1cf88b60a5ea
SHA512 893bd7f67774ab9487d03cdc5aa93329e942eb88554c6a9d81422d19d700e056ecd546dde9080849552a83404d6eed8786c2214a49f338a29a09fae752ecd804
SSDEEP 6144:h4SUjhtXAU7j4v6UcAEvtPR8xBR+c5H9ByjuGHK2Tb+w/B5HQFtbSJPB7A9K+:6XAUYwvL8zR+c5HHyjO2nHvwFtbSZBMj
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

12514

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA SearchPathA GetShortPathNameA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetEnvironmentVariableA GetWindowsDirectoryA GetTempPathA Sleep CloseHandle LoadLibraryA lstrlenA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA ReadFile lstrcpyA lstrcatA GetSystemDirectoryA GetVersion GetProcAddress GlobalAlloc CompareFileTime SetFileTime ExpandEnvironmentStringsA lstrcmpiA lstrcmpA WaitForSingleObject GlobalFree GetExitCodeProcess GetModuleHandleA SetErrorMode GetCommandLineA LoadLibraryExA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer WriteFile FindClose WritePrivateProfileStringA MultiByteToWideChar MulDiv GetPrivateProfileStringA FreeLibrary

user32

CreateWindowExA EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard GetDC SystemParametersInfoA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer GetDlgItem wsprintfA SetForegroundWindow ShowWindow IsWindow LoadImageA SetWindowLongA SetClipboardData EmptyClipboard OpenClipboard EndPaint PostQuitMessage FindWindowExA SendMessageTimeoutA SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegEnumValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA