Synapse Z Bootstrapper[.]exe | Triage

Sharing

General

Target

Synapse Z Bootstrapper.exe
Size

15KB
MD5

1736c734a3e42392c9b232cb7963b98e
SHA1

c31749dd9faa24f8b19fdcf7a6f55acd7c5cc615
SHA256

6e602846b27004fd4263b38621274584a9e7902adfe64e4fd87b5f9966cd39cf
SHA512

3f8d25fa31366cfa4e67b721269e81f6f3f9875ae8e07370612e62cbc569af388881681f07fdd3e4398bcd03ffd1834d76816ac77dfa4c2aa6bba2f1d68c1aa2
SSDEEP

192:kVGDQeaa3Nzej3RrCfMaFtwzqJUCI5GYnYsTjn0P0x634Wjy:u8QeaaBaBQwzYA5GrwL0sx6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Synapse Z Bootstrapper.exe

Files

Synapse Z Bootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\source\repos\Vic\Vic\obj\Release\Synapse Z Bootstrapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ