Static task
static1
Behavioral task
behavioral1
Sample
dekontMPS20231003.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dekontMPS20231003.exe
Resource
win10v2004-20230915-en
General
-
Target
dekontMPS20231003.exe
-
Size
420KB
-
MD5
fdc10b0a79f5e2d47f81c4f81ad4ac07
-
SHA1
1a9b020fe2e21e9ab341643c8f9e96bd8a5da095
-
SHA256
eb129d9324fffc4f901285201177387057e3d6c8f34e93aab8b08eee5b44dcb9
-
SHA512
f0c76eea93c0e23cab41f63b4f7fcae895373134933c6755c56dd6d0d0c14c953b5f0725391dfb392ff22988deeacb5a194e50ac5a87428563367fecd883918b
-
SSDEEP
12288:vQ/VsmwXLT+jUl+cQMFY523fXbfqfc/3ubyMN:4/VsdXLKjUl+cQMFYU3fXbf2c/3J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dekontMPS20231003.exe
Files
-
dekontMPS20231003.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 318KB - Virtual size: 317KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ