C:\Users\Doruk\source\repos\Zynpase P\Zynpase P\obj\Debug\Zynpase P.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Zynpase P.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Zynpase P.exe
Resource
win10v2004-20240802-en
General
-
Target
Zynpase P.exe
-
Size
103KB
-
MD5
4f9bbbffba5014ca76b76808416978c1
-
SHA1
f9297a7ffba2ef1eb72a2346ab948e86b7aaea7f
-
SHA256
dd1fcf2d9387aac06ad7abcc9a62b9ab03f82ab77b7a3b4c7707741c7f5df2ed
-
SHA512
2d448fcbe6ef1c20e8445881d1d58e64e6aec71d0cfa1d84479034e18b71f21c1691768f3a1ab45bd566710819c9df5078954d516b7fef9139c7f4f647b8ed0b
-
SSDEEP
1536:C9JiMu3jRwnrNulCY5ZDE2EY/N9gY+AnQ1SMpid9RtaKrcq0STWn2T5GpBPUS:C9A53jyaCU9D+AqpizaMcqpTW2TQ/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Zynpase P.exe
Files
-
Zynpase P.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ