e-dekont_html[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e-dekont_html.exe
Size

700KB
MD5

dcbddfc4914c9c96a20d7925e699411d
SHA1

e75c5a9639ca6d126ec89e01cc4413d42d398b65
SHA256

c67f1aa3ba774093756918e8dc2a2064e1d8e39a91f09c01d55ad38e73ef5a3e
SHA512

c5dfebf30e7069fe7fb7788fab024219589efa6b23889be492cb6a53a0367cf38e360636c4ac93e28f75bea2843c76a83f9a4a1ee2f4674c0cc6df137dfc5fc2
SSDEEP

12288:w2N8jiZ4zypIPsZtPplTY6RhKuO0sjADah5xfV0hnwVJ87SRbmGe/cOBLTSym:w2N8jiZ4zypIPsZJTDEdXjAW5xKIJ8Bc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-dekont_html.exe

Files

e-dekont_html.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 673KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ