e-dekont[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e-dekont.exe
Size

950KB
MD5

a6445c630e74bb68e2f1f7e6a923241f
SHA1

7c40d2f3c661311c12c9f7f5190ad2c9c598e832
SHA256

83b6540b337ae810f3e218a24b2dc6e6c4a186583669430134781a8e64338ac3
SHA512

8f76b237a5ecc00c4da3f916e9300bc75e3a4026ff14a5195737e308d5ee898777f167f40aacdad3a5b46b4341f31489225faa8c92a149ea36db1876ecbba37a
SSDEEP

12288:JtH87rD6tWZu/8dAKicu39PPM7OTsqUdYLHz9FflQhALN:UDsWZubqkM7OgvYLHBFflQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-dekont.exe

Files

e-dekont.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 658KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ