e-dekont[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e-dekont.exe
Size

1.1MB
MD5

8c2390034e2a4da08460c047614312ed
SHA1

31c57d5f1fea465f4adb1be71b6b192dded8c564
SHA256

ac54d1fe3d0ff07a8342588336d7e9215cc7feb617a4abdc6afe56365938b998
SHA512

1f5c439634beda262a9b2cd3476e554d93c412ca80756158b32d0606944ce76f6f5bcb3c1297faffe096382f90541305c4e74e0939d0b8d165109dd8bc7d1471
SSDEEP

12288:NKO8lpXU5ZkX8SMiOuidSIIr+bnswGlQ5TFd386AV7+RJUnDq8JT483Z:NKRIIr+nsXlUF29yRJUnDxJT483Z

Score

1^/10

Malware Config

Signatures

Files

e-dekont.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 832KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ