E-DEKONT,PDF[.]exe | Triage

Sharing

General

Target

E-DEKONT,PDF.exe
Size

30KB
MD5

10f4b0c1682d7e2a531ae11d983a06d2
SHA1

96ec7993e3d16d67940ee58adfccd9988d902946
SHA256

d9c82841b40c2f7bd89f1b921fcc83c15431283c06dfbf69706fd6e4612d5fde
SHA512

9a9e6a749bec789705c64bb28c1150e76e3a0415ab79ed9ef0975a1e16349c05ba18d2463ffa9893d1c38b06fee0aac12bfd77d4db438630e21ad08253d4e5d4
SSDEEP

384:FIek+yth4H1+UgTtnmuuyBjEIosKu2H8BzUZLxnb2U+/b:Wj+whLUg5RBjEu2HyUZLcT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
E-DEKONT,PDF.exe

Files

E-DEKONT,PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

H~=?*QO}
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ