8700660aebd452d331bd523e803446694c0469af2f3815de02658c8864cdb7e1 | Triage

Sharing

General

Target

8700660aebd452d331bd523e803446694c0469af2f3815de02658c8864cdb7e1
Size

682KB
MD5

56e3c3a44d048a1bf801b9560dec6a7e
SHA1

6c54e61b92fdcc3bbb935fe3be041929db061b29
SHA256

8700660aebd452d331bd523e803446694c0469af2f3815de02658c8864cdb7e1
SHA512

bb4552028fd7a1e8efa04d1f54614f2183b7d68320c5b5e014c60a392d6dd4ea8701d0eba650fb07a7d6700098be2d9f2027dad5102192bdb7b0a0b0c54f2386
SSDEEP

12288:7mKUYdKUG19qf9v1uSqOQay3wn5CUI0iPQbxd2ov7q7wI17z32RnJe5BAA3oHB/Y:7dz8Ugqf9vzVykuQlRqRlyJU3ohxzu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Dekont_524057699-1034.img.exe

Files

8700660aebd452d331bd523e803446694c0469af2f3815de02658c8864cdb7e1
.rar
Dekont_524057699-1034.img.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 803KB - Virtual size: 803KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ