ef0a49acd91623c090732ba2b2e15f707786e3554f71ac7b020b9e98a690b5f8 | Triage

Sharing

General

Target

ef0a49acd91623c090732ba2b2e15f707786e3554f71ac7b020b9e98a690b5f8
Size

572KB
MD5

7a9b067c1ddf55f967af83a637b84937
SHA1

655c66a3099a3ae1f9cfa383b61a1df335256628
SHA256

ef0a49acd91623c090732ba2b2e15f707786e3554f71ac7b020b9e98a690b5f8
SHA512

15bd9e398c776c0b3799db005bfa06d5617c3c71d9d2731b58ad7f042eab747b1e41e73c0519269c8491b74b7b61065bdd6cabd9f11ce3f20e8f004f3de32bd9
SSDEEP

12288:02i/EUCEmEMYDgCi4CRXtMtrY8m4puSNuqZ9II4HFuX6CJB6ADIBO/Sd:TisUcEdgCidJPsCo9ItuDBDQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Dekont.pdf.exe

Files

ef0a49acd91623c090732ba2b2e15f707786e3554f71ac7b020b9e98a690b5f8
.rar
Dekont.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

vTyo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 631KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ