39033 dekont[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39033 dekont.zip
Size

627KB
MD5

0846cf5f4e8d055bbb566a1bdee6da9a
SHA1

fbd9e8e3cebd0e98adce1aa1975a79d12c8d571e
SHA256

6c94d0dbd89792cb274d3e341a3c4a87c75877d4dd0db0e6db931919cd673556
SHA512

46f42ee7b47e73a2f6936e876a8af6d61d9ec90d3751858e6ddf0a2ca05bef07f317687a9632412efe20124614fb5b11916ba0553741eaed593a99140abc0358
SSDEEP

12288:OavslaU28j7hBhqtunEZgmHKL92YyvXdsEmGqk3Kk3QOTufCVsMW65Om:Oa43xCAnE+mIgPqJsR3QjCH0m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KVO2aqcU3IgpqHq.exe

Files

39033 dekont.zip
.zip
KVO2aqcU3IgpqHq.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 714KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ