Static task
static1
Behavioral task
behavioral1
Sample
EKiosk.Decin.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
EKiosk.Decin.exe
Resource
win10v2004-20230221-en
General
-
Target
EKiosk.Decin.exe
-
Size
17KB
-
MD5
f7450248f357b0017964ac5b408dc790
-
SHA1
04df947d77f2ea48df272e8ac3350211dea24f2e
-
SHA256
a54ceb31f8c57b9eccd0db4bb2b7eba2e14e54f26311e05e409f2d88fa20bbd2
-
SHA512
bf9e8cec0326fe13408c129bba9412ae9153bf02b9a1fe32302d221380c025b38f11878b5873ecee68a19d24a316644bd58bce5ada1440a41bdddcf6e342a15b
-
SSDEEP
384:sQ9iDuVpxxUuxl1CdYXe04a4+ElE/5ImdrPh5U2fMy2H4rf51w4DgM:0QzDpCSeS4+EIImdrPh5J0y2HswGgM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EKiosk.Decin.exe
Files
-
EKiosk.Decin.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ