F:\Office\Target\x86\ship\postc2r\x-none\csisyncclient.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4d9ba9edd8a393add9952a8a6d3377e775bdc75fd354b0fe803eace79cf06896.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d9ba9edd8a393add9952a8a6d3377e775bdc75fd354b0fe803eace79cf06896.exe
Resource
win10v2004-20240802-en
General
-
Target
4d9ba9edd8a393add9952a8a6d3377e775bdc75fd354b0fe803eace79cf06896
-
Size
769KB
-
MD5
30dc5c2d803952296ed600ce2806dcb9
-
SHA1
358dea10fccdda3398ea2cd84391a5c0c2f1ca08
-
SHA256
4d9ba9edd8a393add9952a8a6d3377e775bdc75fd354b0fe803eace79cf06896
-
SHA512
1969805b740fb9d43c1397c7265f5fcc4e49c5f58e7132243ef8e0c0ffb6166a7caefa59dd73205553dea1e5884572800e45c4f50a2eaee10085cd12fa334bd1
-
SSDEEP
12288:1iNIwdgiNIwp4CAwSfxL/2Dc3jDLLmt0LDQewsAjRE:18gqSaewsAju
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d9ba9edd8a393add9952a8a6d3377e775bdc75fd354b0fe803eace79cf06896
Files
-
4d9ba9edd8a393add9952a8a6d3377e775bdc75fd354b0fe803eace79cf06896.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ