Fake synapse[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Fake synapse.exe
Size

19KB
MD5

6a3dfb0d071a5230d09a29f9372ed16e
SHA1

3dbc09d0d7abb94c78f31594d5032d5d7134f0b8
SHA256

97538f09a106c00ed51b6679e8ec367ec59180f4e19910e6f45d6d2d830b5036
SHA512

3c24fea7dac067974493dc2ff80bffa3cbad3fd3af5077cec940424124c801628ab18969cf4199243c166e24abb9ed68a1ba1555bb60e57ecedbd1dd19cb0249
SSDEEP

384:/5pTRZK69Ea6G6z/5R646k4NWE/2/NeL3K3qkIKHFwgCCCCCueffvx:/zTRZ5EdG0o8aw0EfIKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fake synapse.exe

Files

Fake synapse.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ