dSrE.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e-dekont_html.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e-dekont_html.exe
Resource
win10v2004-20250313-en
General
-
Target
e-dekont_html.exe
-
Size
751KB
-
MD5
f7ff8dfb747288afcf93d2fb684bda69
-
SHA1
10b18972da7d8972712f98483fbe99139b3cb0cd
-
SHA256
15129e8c98976b6364fcf04b6767140dfec8152a5c7b3554178ac9f75f0e6c8c
-
SHA512
231f8c7b52d0d059ecaaad88b2b77cefbba5edde3284ea0b9ac3d63a7406660af017409f218d67397c6eff4faf784e82cffc4b9020ca1303f005b347016882c3
-
SSDEEP
12288:BdjJYyOn6nzxl1cbs2KWG2hY6uIJXpABu+vuemkeJQGLBdXwwupjIcDx:JY9n6nvEstOhY7IJXqRXU7tdXz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e-dekont_html.exe
Files
-
e-dekont_html.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 744KB - Virtual size: 743KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ