Dekont[.]rar[.]xlxs[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dekont.rar.xlxs.pdf.exe
Size

661KB
MD5

383c4a2e28c4f0bf2688c285db3ad7a1
SHA1

55c2a375b252b67d0c9734c3ed3153dbae75e501
SHA256

f7ef5be8bf7de33a4fe1bb68ba8aac2cdc5c42060971b8c9a7cab498476cf3b6
SHA512

6c7993aa2585b9cc21de6dbfb0775480fc9c03eb758059c01953b3351fda1e4b807567465c044c855fefff14ca08e73b8901a9e921164335b036059f8e4f5228
SSDEEP

12288:nBV82yadJRNNmEGH04q48MuRwtFWQc6UPKbxDOVIdcF7dd0rn72F3j:nr9vdJvjTJ48MuRwtFWd6xbx6a6PKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dekont.rar.xlxs.pdf.exe

Files

Dekont.rar.xlxs.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 658KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ