SyncExpSim[.]exe | Triage

Sharing

General

Target

SyncExpSim.exe
Size

873KB
MD5

14ab38a5c71c6f6c3d42bc64a8fc4f7f
SHA1

023c731cf942b174da2e5e9b901202a1a207d6cf
SHA256

606def7636b17e99407b99381453c34553f1bc7bcf761ab4bf06a2dbb0dcf5b8
SHA512

92e204aaf3a592d4bf660ec139e573dc0d098f32ab089198bece5657ad29597da30a6076734497be9922a4038808b75cec0ca6a2b052b1450402d34b8c535471
SSDEEP

12288:FPrAny1JSuEoKLEamGekM9NWapY5PujKKSpyecbYq5T52A4FwASuSAoER+odSpY+:yny3JXNKFP0Dl52FHSuSAo2SH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SyncExpSim.exe

Files

SyncExpSim.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 729KB - Virtual size: 729KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 515KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ