SaSync[.]exe | Triage

Sharing

General

Target

SaSync.exe
Size

317KB
MD5

feaa00bc809a5d731d86beca8a919806
SHA1

9a7c1e1d6bce49e5c48cfd7aef258ca6e9e6cc9d
SHA256

2f11d96627e417d4cf2ccd4497e5b67e141bc37978744ad125e364cf39c5dfb1
SHA512

25e897618e6a10fab7a38e763802176482375b98f1ab7f0cd2e0c059ebad7cd46ea027bb63e57bc69b3ef19741d6dadafe0ba2e079fa8fdb00de16d77d28b8cb
SSDEEP

3072:8kMV4xYMV4jSgvw6WgiQlpQvN9aGloZiV4VlcUeip1jE0azuTSyQlvf9NfGMV4:8kMV4xYMV4MyVVeUeip1WSQ1n+MV4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SaSync.exe

Files

SaSync.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ