DSync (1)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DSync (1).exe
Size

1.0MB
MD5

7dcd7161e580d1d8617f1506697b08b2
SHA1

ec9e2a1241b6259524699da3156412e1f832018c
SHA256

0408c32dd03a4c494e736f09a16ef17d9111886d5ca23784b64208ee2bda69de
SHA512

980a6692b5488d01841ae4cf10bfdf59eb0aa2fa5cf5b4915af0a82834dd9544fc756da6ce4ab86e9ad59f28ae87bab3d208f4d2c12e16face8099b9244a2576
SSDEEP

24576:zS+trje6B/F5bl4TUPoqeRB+trje6B/F5bl4sXrbM:2qyMHeDqys7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DSync (1).exe

Files

DSync (1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 810KB - Virtual size: 809KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ