Dysnc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dysnc.exe
Size

14KB
MD5

d92eba717a66aa0450cf9e93a825385d
SHA1

9dd769d757a0459562903cd37b64b9f3f8893805
SHA256

14f7680cee8e5f678a73bf263035bc59d0e4dfc2261a3d58d9edca335cd9f372
SHA512

b0be625cb10391dde94d1bc90e320acb5dc0c5277b2d65b3b88d987b12ebe9c333898bbc07433221b6f2158870015fc1f55abcf060c8fff6854c9035da39c6e5
SSDEEP

384:Adt2gKfSNPSz956N/kqul++JptYcFwVc03K:AMz9cN/kquHjtYcFwVc6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dysnc.exe

Files

Dysnc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ