e-dekont_html[.]z | Triage

Sharing

General

Target

e-dekont_html.z
Size

651KB
MD5

1350d609ee9ecf827251991d49641d42
SHA1

fb9404897624e9852ecc52128b58e8546615c24a
SHA256

7855024845204a63fe220da3cbb17b5b62e7d8c158f50876c16565a184ec316d
SHA512

c01d8a897437bc62ac5e6f69f8e2dfc86913b281784b0b7ee4dc205e1f3ff4c605ef248327c3478864973f84d9eca358a5299cb7f3a338ac6d8f73afd691cdc4
SSDEEP

12288:tT0abKfg9wl1wc0z5X+Sjr3t94h8O5z1W7BKx7vbijKTp/k5bze:VafgQ1nYX+Q3t95O5z16BCOjupkZC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e-dekont_html.exe

Files

e-dekont_html.z
.rar
e-dekont_html.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 757KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ