Dekont_20240311_838483748849[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dekont_20240311_838483748849.exe
Size

2.2MB
MD5

6b9e62cc94ac2f097a6e46b4fe9e3fa5
SHA1

9caeb12112b830a14fce8cead925658ae9790096
SHA256

5e3e10e5faa088f4d13ae7c4bae320e0e5de2ba60d2e6c03f1e455c1a5afbba5
SHA512

3155c3aa2af038dd99588b35bdad2d94dca79a2c8d1a00d9106cbe7c68c17d8aa1f0b8c657d453a52e4730b4291eecde59ba7914b8d754dc97f5936aae2c1add
SSDEEP

49152:3rYibVhSdoiLFizYibgOIzmK4eKvbDLwedM5Bc7Hl7:3r/VEoiLFiPb5vbDL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dekont_20240311_838483748849.exe

Files

Dekont_20240311_838483748849.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ