Static task
static1
Behavioral task
behavioral1
Sample
e-dekont.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e-dekont.exe
Resource
win10v2004-20240426-en
General
-
Target
e-dekont.exe
-
Size
3.4MB
-
MD5
a8f51de2277f3a90a0e5d7216acf22e5
-
SHA1
3b1762e980f1856eaa930ba6fef420b52f403188
-
SHA256
6d634e0243ccefd6e5c440775482fa38cc12ae53f0ccf46a4f7e3af5036607e0
-
SHA512
f787556cf1da028f4b0ef317dbdfe61307020111d0c70a9cc08519ee1b609ce985f9b728ce7129aeb6bd8efc94254a11909819d30bb49a7482c81e3bde571396
-
SSDEEP
12288:MMhnTShWrCFkGz8tO96Xnbs7mSUZM0ZApusIL08VMbdMycwZf:R1CFj8kI3bs7Vn0uu3nyf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e-dekont.exe
Files
-
e-dekont.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ