dekontS009892823120097[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dekontS009892823120097.exe
Size

674KB
MD5

a07510c83937ec65ecb42ed890e7bfb4
SHA1

955216c6cb63b82041b024740819204823ac447d
SHA256

218eedeec9c3485bce17c4b42331bd00fc0a43f9975e5902c997b0c6509f4f51
SHA512

b7f74d5a4f71f0877aa3fab476967dbcd0d7074fd9477914bfbb2b8f3b24d968dfa38d4092c7c7b8b1c9cd7b047e9138fe1ac8167f88fd7a23af7f7620f6481e
SSDEEP

12288:yrD6WdDwFjrlMElzUhbv8DRTAjXXq4GMu/RnAhcjCMaf8Do6CoFdkv/z0K:ADFDwb+8DRTArXqHMSecjCMa2JHFdZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dekontS009892823120097.exe

Files

dekontS009892823120097.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 670KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ