e-dekont[.]pdf[.]exe

General

Target
e-dekont.pdf.exe
Size 1.2MB
Sample251015-n3acmsbr2z
SHA256 dc60b3a787e014b5ed9ef2a3eb0d7b7d93ed800d0524a10d0eb8447d47b43926
MD5 6f5ae138326ff745f4a8d7d3621e7673
SHA1 459d6d57c8b3c07fd778c267a8ac8927d2b7839e
SHA512 0d79f81af365f9e76fe71873456a65d1181a17a6ec6278d933723f9dba3fb2592ec219b13367b0efbaf6244a30374d82703e5adc6c5eadc1c3baae1bb21fc1f5
SSDEEP 24576:+TnypdJ51YxkIJB4K1hgyc6LQ6sJV6+5yKI9rdJ8o1ZyAw7kJ9oS+v62f:ugdz1xwLBAk9Pjj5wq9oSs7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-dekont.pdf.exe

File Explorer

e-dekont.pdf.exe

.exe 1.2MB

e-dekont.pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 dc60b3a787e014b5ed9ef2a3eb0d7b7d93ed800d0524a10d0eb8447d47b43926
MD5 6f5ae138326ff745f4a8d7d3621e7673
SHA1 459d6d57c8b3c07fd778c267a8ac8927d2b7839e
SHA512 0d79f81af365f9e76fe71873456a65d1181a17a6ec6278d933723f9dba3fb2592ec219b13367b0efbaf6244a30374d82703e5adc6c5eadc1c3baae1bb21fc1f5
SSDEEP 24576:+TnypdJ51YxkIJB4K1hgyc6LQ6sJV6+5yKI9rdJ8o1ZyAw7kJ9oS+v62f:ugdz1xwLBAk9Pjj5wq9oSs7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1236686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DHyP.pdb

e-dekont.pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

e-dekont.pdf.exe

mscoree

dotnet