Syn22SlaveHIS[.]EXE | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Syn22SlaveHIS.EXE
Size

404KB
MD5

d11b15f6dba0595cf586ed8798eccb88
SHA1

8231490bf0bee59b9722b4b24117ca82b2b5fdda
SHA256

d794161f5de33d9bdbfb89265c16b768daadceebb39dfcab8f4eb0688d4f52f6
SHA512

c8391ebe8f3570a9cdfd54863d65ea4d3ba3986a3efbc3494ea8e90fa5a008bfabc9ffe5b9ad1fc3ec4cad49d90533e8ff831b94650d2da6edec564b38019eb2
SSDEEP

6144:YOx3GaaSBVQkUNTtM1NBmtz9ZMym4tot5kJdJ6f+/DTRu+eyVyeBNI:YONZoTBDZ1mR5k3JZbTRu+7I

Score

1^/10

Malware Config

Signatures

Files

Syn22SlaveHIS.EXE
.zip

Password: S@ndb0x!2023@@
Device/HarddiskVolume4/Neurology/Application EEG,EMG/V22/Utilities/Syn22SlaveHIS.EXE
.exe windows x86

Password: S@ndb0x!2023@@

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
manifest.json