e-dekont_html[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e-dekont_html.exe
Size

567KB
MD5

5c8cd104fb0506c2fbc33994cd4cc6ad
SHA1

5b7d7006cea3d52fc6a71a8fd4714efe1a883c01
SHA256

ac32a3b616e9fb1f37a3f8e84db8475dfefb5e3ca56c6eb5580fc6f3887d8744
SHA512

6f3c32c236c1d28c810f39d6e4e2b9e526f5651b9d74776cf095776b890320f5ba2427ff73e89e59bcd5cdaa9e3d36376e4cefda17232e8acc64367d644a108b
SSDEEP

12288:eiuRF2iNkVdat73hlocrYSMFaNU0xF03PTq2KjXz1Slj:ei0F1sEl+cEgUHPTMox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-dekont_html.exe

Files

e-dekont_html.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ