e-dekont_html[.]exe | Triage

Sharing

General

Target

e-dekont_html.exe
Size

861KB
MD5

b0a551eade5ef4956c2810593be38bd4
SHA1

3581e10ab46a4cf8347c747062ce7aa1f6fae2a1
SHA256

ef8e672ff4f30d2630ddebcf804c67d572e9979c949e4803654572479f486db0
SHA512

3825cb6bec164720fbadf6ad87ca713fa45a89f10d7bef4407cd25d5cbd01450af9ee2e148c7873dbde0f6d99292d016ffd55dec1bfc574953489f5e57b300f5
SSDEEP

6144:aeQ+WirJC36P8cjmJGdZnNlr9jXjQAczVLoOStPj6zAofaQNQ1rSjeZg+TGPD5gt:TSRc7TGgoqNre2TnhwBsVNfsHbM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-dekont_html.exe

Files

e-dekont_html.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 858KB - Virtual size: 858KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ