e-DEKONT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e-DEKONT.exe
Size

733KB
MD5

6915c0fc350caea18b09eb08bb8a1cd6
SHA1

4e8573dc37380776c8ba57ec3d5c43d5041ec1dc
SHA256

0705a360829ae066c9066bd53cda2376350d306f0ce3b170ae00fb09f4a28044
SHA512

0370e30750098ac482d78d6cd1aa272e9b4f64562b0ae4581d53de7d9183e0e4ad4cd4ddc713c09a3f011d0dd856884fee73f06a6f1141a544fe07033445008f
SSDEEP

12288:ngsCZTiqyJMuktfPLqwQqHA2BFmWY9UQPN6iX7fsIRvryEwjrbisT9908Oqm:Oh5OMXhlHA2BFpYP6iXLN1yhrbis/Jtm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-DEKONT.exe

Files

e-DEKONT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YegS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 731KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ