19012024_8377388273_dekont[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19012024_8377388273_dekont.exe
Size

710KB
MD5

e1a966357f530fcfadc5743650e6aa55
SHA1

2743f7b8b2103dbcf67accb6e0d7a4f091ec4e9e
SHA256

630125600827517bdac89201143ee892721fcbe75439d5462f87297226d53c0c
SHA512

b3b66f32ea7747a60d39f50309837ea79cb94173ef5d2c138d4bd7ba003bc6f7e140e38d5e059ebff0773d80f49d544c09f6cf7c1f5eb3654481004b5d9b82f8
SSDEEP

12288:acmwXw9jxFLtxB04eDMLGqq460iO73kHVWmTRRDYu1IhWauL6+yShU9:hwjxFLtxy4OqbIRmMIhDyVh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19012024_8377388273_dekont.exe

Files

19012024_8377388273_dekont.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ