Synthara[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Synthara.exe
Size

13KB
MD5

81e4e7c18d4043899b34151793c731c3
SHA1

762263fe497880569dab3aba2a9d601ec9c130db
SHA256

118ea1f04a4d1aec363eced0bbea4f03b77fae8a013ac04397aff09f4ea618ad
SHA512

97f7d2018776918878ec1cc19b12841e609f082dc6a3137b10b87f2e758844dee19366f2210856eceb07206b2048f35cde3699a36cdd14bbd6f6fec4ff8a8556
SSDEEP

192:LzqixrzbX7LAi+QFujPs/JIqPf1msBUm0cavYXENjf1VtgJ/EduhvDYVhtmffBb:fnlvLb6jAiZiAf1/g9EAhvDYVhEffB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Synthara.exe

Files

Synthara.exe
.exe windows:4 windows x86 arch:x86

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Drilon\Documents\Synthara\Synthara\obj\Debug\Synthara.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ