General

  • Target
    E-dekont.exe
  • Size 575KB
  • Sample240219-lcetbsbf8y
  • SHA256 b2aedf1de53ed6e8b341efc26bfa06068a0c1dcfa04af94d998ced18546ad5d4
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • E-dekont.exe
    .exe 575KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • Accumulators/whitecup.Lak232
    322KB
  • Flygtningelandsbyer/Oplukkelig/tildelingsstningens/stafets.tra
    398KB
  • Melitta/Assonantic/evakueringsvelsers/Jakobskamp/Blyantstegninger.Mum
    .ps1 42KB
  • Melitta/Assonantic/evakueringsvelsers/Jakobskamp/Illuminist127.pas
    296KB
  • Melitta/Assonantic/evakueringsvelsers/Jakobskamp/Sovepudernes.txt
    480B
  • Melitta/Assonantic/evakueringsvelsers/Jakobskamp/Sportshallen.lkk
    341KB
  • Melitta/Assonantic/evakueringsvelsers/Jakobskamp/begrdeligeres.mel
    138KB
  • Skrvindsels/Bide/Lepidodendron/skriveblokkes.eft
    431KB
  • Skrvindsels/Bide/Lepidodendron/sljfes.bac
    151KB
  • Skrvindsels/Bide/Lepidodendron/spirane.mac
    414KB
  • lokalplanstridiges.str
    235KB
  • loupen.kap
    290KB
  • plaustral.bof
    426KB
  • skoleskibet.phr
    344KB

E-dekont.exe

  • IMPHASH e9c0657252137ac61c1eeeba4c021000
  • SHA256 b2aedf1de53ed6e8b341efc26bfa06068a0c1dcfa04af94d998ced18546ad5d4
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
c9:b0:8e:31:97:27:52:c1:3c:db:4e:66:a2:ea:4f:63:dc:ae:06:64:6b:f8:3e:a9:c0:69:06:12:a1:bd:99:ab
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Brite,OU=udtjentes puerility\ ,O=Brite,L=Blagnac,ST=Occitanie,C=FR,1.2.840.113549.1.9.1=#0c1a537461766b69726b65726e65734043657068616c69736d2e416c
Chains

Feb 18, 2024

Minor OS version
0
Major OS version
4
Entry point
12853
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths