Static task
static1
Behavioral task
behavioral1
Sample
e-dekont_html.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e-dekont_html.exe
Resource
win10v2004-20240508-en
General
-
Target
e-dekont_html.exe
-
Size
2.0MB
-
MD5
a252a00ee0012cbc20d2fec5d1663929
-
SHA1
6b30f6e481e42d55ad6e36944d711c13330be779
-
SHA256
e663374bbd68568700dfce770daed6e7b19454d17f71764bffdb9a5dc4c34e56
-
SHA512
8d5ed6f70b40eb3cdc87a82d746f6704a0634d0eac5460a47cd24315afb61342918db78bd50aebd8890445989c9ea2432cbc6738df7f4fe43e8776748633a033
-
SSDEEP
12288:vhNHKtD0aFBwaJmIhsxWCPTmfuGEYbTEpUg7kunCvim+sS320:vhN8JdQWD9EP5ehSm0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e-dekont_html.exe
Files
-
e-dekont_html.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ