Static task
static1
Behavioral task
behavioral1
Sample
dekont_20240424_388993774837743.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dekont_20240424_388993774837743.exe
Resource
win10v2004-20240412-en
General
-
Target
dekont_20240424_388993774837743.r12
-
Size
591KB
-
MD5
b8a50960958a5dbd68229d828cd1ff05
-
SHA1
8598dcb8970bbd9557646820284e422c9d8262d0
-
SHA256
a80ae93ef420d3b1a4389d4d1fff6614cb076aee72667e0af11954ce3f3f5858
-
SHA512
081c5cd872750ba88a4d6d9b3c8b66d9e6ebbd0e546cf7561d8afe7c31a15b8487134a2636c7b7d648cb02f27c707d85242177e4b7c022c8d77b36240b60b2d3
-
SSDEEP
12288:sY6svN/jLdTvthNgYQaDzwk4mM6/dmD3qiOOl++snC4zXgR3K55E:b6svNVbTNgVQSmM8dkqiOh/nC6weE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dekont_20240424_388993774837743.exe
Files
-
dekont_20240424_388993774837743.r12.rar
-
dekont_20240424_388993774837743.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ