e-dekont_html[.]exe | Triage

Sharing

General

Target

e-dekont_html.exe
Size

987KB
MD5

07c74f2eb5d77c5e69c1f7b7d7658d4a
SHA1

381458e5883ef4f4be0b5d349b7d7ded8a0c1876
SHA256

3fc2adeb47b4f9fdf134587dc79fc696f13852e509b883e9ed7b308b77846016
SHA512

0d544525e3879a24efb6d1a114ac73291838eb9d822d0b016d2ef80792128a0fc1af26693b3b5a5af0085f8d48f30b311ce70f5e343bc4fec77e662b73ae15ed
SSDEEP

6144:sYu/nNw/FlJEd7QCpiAnr3RgRre4Z+54ENKb9ITuIQRSYKJA+CC2BE8UgF69gHJJ:b+ld7QCYSNQe4EKRHIXh+PEzbEqvC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-dekont_html.exe

Files

e-dekont_html.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 622KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ