e-dekont[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e-dekont.exe
Size

862KB
MD5

3860b1ebdd5b8fa2d4e4306d57646dfa
SHA1

72c06c986bb56f2b7d0b186026f006fb68f0b3c4
SHA256

06491cd2952c4f625d71050ecd36d6256cf3111de0dacd18c81aedefd8035f9e
SHA512

8f34c2f293734928548a29f3eeb93bc75da66a477b7886823b9df21572b9f672e9739f3cfbcd8a12d3612cdc56e14f017949d61bb967e76dfd92472fb82d105e
SSDEEP

12288:ZNj5Ay7R3+nVsYshTsaUDRn1krv6k0qrGjuAMbbcofj:Z3QVw1sagn1ep0qrGjab9fj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-dekont.exe

Files

e-dekont.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 570KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ