Synapse Z Bootstrapper[.]exe | Triage

Sharing

General

Target

Synapse Z Bootstrapper.exe
Size

380KB
MD5

492f8f3d6cb62a2e595a92576a0856bd
SHA1

f60d599512e6556aaf41f120d398c5b3f8871eb6
SHA256

588ca04ad3f4ae5193254fd731df0f4991837aff2ce4a0f4c7284f180af27d1c
SHA512

25122a873f8fac4cf31cd28e78be844f9242fbb7bbced827f1d0d1042a69bf8cf3f4dc3674043e094dec776725bd68f5287eeea1687bbf5b58369573737f25f0
SSDEEP

6144:JtR4iqr4OkNAnd3x0dRoG51W5IkiqqHjLBYaMe7h0nw38WI:NDpTNOn0dRj51iuP+W7aw3X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Synapse Z Bootstrapper.exe

Files

Synapse Z Bootstrapper.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Synapse Z Crack.pdb

Sections

.text
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE