Static task
static1
Behavioral task
behavioral1
Sample
75240249988_Dekont20250203_27383773,XLSX.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
75240249988_Dekont20250203_27383773,XLSX.exe
Resource
win10v2004-20250129-en
General
-
Target
75240249988_Dekont20250203_27383773,XLSX.exe
-
Size
623KB
-
MD5
f2cc801b28dda05a63c46d736ed30ec8
-
SHA1
73b728f5b8a2631c6a0ac0b2bd9faab180580668
-
SHA256
a1ab0620a442b9a43283cd20d3d2c5d168262b56f35224e07b263c985ba41849
-
SHA512
9f12851d803edac1187e82e3a1d9467e6e2860a526bd4af68ce7ef25b377979bc73d94ad9c35943e3bd5c112b967344b507384498f3f495027b736517a9947f9
-
SSDEEP
12288:kYubKySswecl9dAaIIzGzzMWMli3FarIkfaPiIDGm:AweSXzz7iKfmbDG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75240249988_Dekont20250203_27383773,XLSX.exe
Files
-
75240249988_Dekont20250203_27383773,XLSX.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 613KB - Virtual size: 613KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ