e-dekont[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e-dekont.exe
Size

889KB
MD5

cf4b50c9a644dcc57ec043745b66982b
SHA1

fa2c3775f061ad5b6469c66ec8f765af6fa9e259
SHA256

d8ed3fb0de9b294adf3d48b7149010d51b01a9f9b262581aff015f1318999671
SHA512

81b051192920770564a1feb56a3053ba9ea28d9cebd21d0c6b1a76adcd1962304e8e3fc201a7231ddad6bb5977d1228e89fdb079913d55219398be1dd142fcc0
SSDEEP

12288:Uqi0FmT8wnh6RUm/H702p6tor4v0+/4gtk+ZTDkm:Ri0FFwh5+HY2pEofm4gkwT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-dekont.exe

Files

e-dekont.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 597KB - Virtual size: 597KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ