e-dekont_html[.]exe | Triage

Sharing

General

Target

e-dekont_html.exe
Size

527KB
MD5

334e9087cbd4291ddd9a8cbef5405551
SHA1

07e64f77ebcb3871043a7bc89f3ad1595e5325bf
SHA256

fd272b82f6a8bba4cf146ca17e16030eee6bca8df4dc58330a3721dddd79a43e
SHA512

e68983032cf0dbb59e5381aa42f742a75a8a38c1ba1aa8a3e4b9c9dd6076a18e26ab324ffae98ea029c68f6af3ede50e598498bd8fffad1c401ab011586bf36c
SSDEEP

12288:cqkezt54uIFuMPbu4yMoA1IjtJ2ENKeE2Q745Z6:ZkeIuIFuM4A1Ij32iKr0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-dekont_html.exe

Files

e-dekont_html.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 520KB - Virtual size: 519KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ