DesyncV2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DesyncV2.exe
Size

5KB
MD5

82335686017150a8c72f172ad3de76d4
SHA1

429af7655ac033ce8ed4c7a3aba8f8c41b8dc502
SHA256

660a2da44c645a0d727ad2efe3dbd6e6ba734dc7dd00731239b6fa99025f2bc0
SHA512

cf441726ab39e491b60a024210788bed3c4db00ded7b27a4f6b0b96cfd3eb0af0df8877252c009e2aa6858f996e09172cdeb09ea8a2a6d20f76c46fe8147ba11
SSDEEP

48:6Sp2KljphvrQR45Y6K5J+AlVwYNM1+p/Ug710DTQSvKPLe+J/Tqrj/WyltlqlFqb:X/jyrT5THwV+pr7ifQ6k/TajCHzzNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DesyncV2.exe

Files

DesyncV2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\psycho\Downloads\NetLimiterApiSamples-main\NetLimiterApiSamples-main\cs\LimitForApplication\obj\Release\LimitForApplication.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ