Static task
static1
Behavioral task
behavioral1
Sample
DEKONT-01.pdf.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
DEKONT-01.pdf.exe
Resource
win10v2004-20231020-en
General
-
Target
DEKONT-01.pdf.exe
-
Size
175KB
-
MD5
f5c32e3ed667969186412395e045db8c
-
SHA1
132274978970ca54c6849f89e931cc1386d2e6bc
-
SHA256
d7217211343721c3d6d51d07778a2d90910cf186ef457670dd396f90604afeed
-
SHA512
6b43eb5564d2ff660d2fae6c81097b66ea4ba4fef7e6f6a9f3f3adabf10d3248b2955aa93c6077778002f6aa4bcd181ffd69f37190be18320e0688902c10c208
-
SSDEEP
1536:LlZYKpARbL1uC6Ajba5V4euvvX32DEGu34HFnCxCeToYP8CIE3mWGjgfxscFCw9H:pusC6MzeuHbiGoDEnxscFCqg16aaWno
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource DEKONT-01.pdf.exe
Files
-
DEKONT-01.pdf.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ