dekont_267655276246262432,PDF[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dekont_267655276246262432,PDF.z
Size

575KB
MD5

b4021bd0c41023a43a82614efe353867
SHA1

ee8cd757c06316976dc1b637be7f1136e9b83861
SHA256

70c902a035ebe9a7874a34f7a8a602401f910dbf3294eb233bc84a73b0926e73
SHA512

c9a607571f46948052dacf2fafd5d0298e9584673ed152b6c70468f808306f1fa0cdba72a333611682acb0e654648bed724eeceae653ba3df354f7c9c1a00be1
SSDEEP

12288:Sb0YrCF/bD+4FTo7pL5KQ8tksueW1dIgehCMV7gPn69S9CNpX8VsoQG4:SoYmF+4FTop10Q1u/1g6cgNpJod4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/dekont_267655276246262432,PDF.exe

Files

dekont_267655276246262432,PDF.z
.zip
dekont_267655276246262432,PDF.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 631KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ