SynapseFrameworkInstaller[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SynapseFrameworkInstaller.exe
Size 14.4MB
Sample260625-tt1fcsds81
SHA256 d13d754279b05fe92ea1c67c1565cdfc5b1e1a943a53879000fce5e6e50442bd
MD5 ea886dfdb1b322bb67dfd7e40c13a3bc
SHA1 b2123d05a18b58a9441eb69d7421fc547c6d22dd
SHA512 49984a8046e6e59b2d429332d676aea33510ab3df0fe11f140995f54d75c13b169b83bd535dfdb5e0334f37b6026ee1e14838e5cf2f5706755577415164b85dd
SSDEEP 98304:9FU1l0IK3OrrPFQiLuiQO4/JTs1dXy2NlptWVsP0MkBA0IqegVUHqrPP21UCn+2p:LoM3O/P4O4BTwdXn/t8sP0RIqeg9DO
TLSH
T1A4E64A03FD4143ABC46FC3B5DEF64232B335B4CD9B23225F2698A6201D92B512ADE65D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SynapseFrameworkInstaller.exe

File Explorer

SynapseFrameworkInstaller.exe

.exe 14.4MB

SynapseFrameworkInstaller.exe

IMPHASH 3cbd6949eff243e46af5a5cba52ae0f8
SHA256 d13d754279b05fe92ea1c67c1565cdfc5b1e1a943a53879000fce5e6e50442bd
MD5 ea886dfdb1b322bb67dfd7e40c13a3bc
SHA1 b2123d05a18b58a9441eb69d7421fc547c6d22dd
SHA512 49984a8046e6e59b2d429332d676aea33510ab3df0fe11f140995f54d75c13b169b83bd535dfdb5e0334f37b6026ee1e14838e5cf2f5706755577415164b85dd
SSDEEP 98304:9FU1l0IK3OrrPFQiLuiQO4/JTs1dXy2NlptWVsP0MkBA0IqegVUHqrPP21UCn+2p:LoM3O/P4O4BTwdXn/t8sP0RIqeg9DO
TLSH
T1A4E64A03FD4143ABC46FC3B5DEF64232B335B4CD9B23225F2698A6201D92B512ADE65D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3757740

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

SynapseFrameworkInstaller.pdb

bcryptprimitives

ProcessPrng

ntdll

NtDeviceIoControlFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile RtlGetVersion NtCreateFile NtOpenFile NtReadFile NtCancelIoFileEx

kernel32

LCIDToLocaleName AcquireSRWLockExclusive GetUserDefaultUILanguage WakeAllConditionVariable GetSystemTimePreciseAsFileTime HeapReAlloc SleepConditionVariableSRW GetSystemTimeAsFileTime lstrlenW LoadLibraryW RtlPcToFileHeader RaiseException GetModuleHandleW HeapFree RtlLookupFunctionEntry FlsAlloc GetCurrentProcess GetCurrentProcessId WideCharToMultiByte ReleaseMutex WaitForSingleObject MultiByteToWideChar HeapAlloc GetProcessHeap FormatMessageW GetModuleFileNameW SetHandleInformation SleepEx SetWaitableTimer ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW DuplicateHandle FlsGetValue FlsSetValue FreeEnvironmentStringsW GetEnvironmentStringsW RtlUnwindEx QueryPerformanceFrequency LoadLibraryA GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext GetCommandLineW SetEnvironmentVariableW AddVectoredExceptionHandler GetCurrentThread SetThreadStackGuarantee GetModuleHandleA Sleep GetProcAddress SetUnhandledExceptionFilter FlsFree FindNextFileW GetFileAttributesW CreateProcessW CreateWaitableTimerExW ReadFileEx WriteFileEx CreateThread CopyFileExW DeleteFileW GetTempPathW CloseHandle SetFilePointerEx GetFileInformationByHandleEx GetFileInformationByHandle SetFileTime FindFirstFileExW GetFullPathNameW CreateDirectoryW SetLastError WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle CreateMutexA SetNamedPipeHandleState CreateFileW CancelIoEx SetFileCompletionNotificationModes CreateIoCompletionPort GetQueuedCompletionStatusEx ReadFile PostQueuedCompletionStatus WriteFile GetOverlappedResult GetSystemInfo SetFileInformationByHandle DeleteCriticalSection ReleaseSRWLockExclusive MoveFileExW FindClose InitializeSListHead GetEnvironmentVariableW GetFinalPathNameByHandleW GetLastError GetCurrentThreadId QueryPerformanceCounter SwitchToThread LoadLibraryExA FreeLibrary InitializeCriticalSectionEx OutputDebugStringA OutputDebugStringW LoadLibraryExW WaitForSingleObjectEx EncodePointer

shell32

ShellExecuteW DragQueryFileW SHCreateItemFromParsingName SHGetKnownFolderPath SHAppBarMessage DragFinish

ole32

OleInitialize CoTaskMemAlloc CoCreateFreeThreadedMarshaler CoCreateInstance CoInitializeEx RevokeDragDrop CoUninitialize CoTaskMemFree RegisterDragDrop

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

user32

PostMessageW AdjustWindowRect InvalidateRect SetCursorPos GetWindowLongPtrW EnumDisplayMonitors SetCursor LoadCursorW GetForegroundWindow FlashWindowEx MonitorFromPoint UpdateWindow RegisterTouchWindow IsWindow IsWindowEnabled IsIconic IsWindowVisible EnableWindow GetAsyncKeyState SetPropW GetKeyboardState RegisterClassExW CreateWindowExW SetWindowTextW GetKeyState GetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity MonitorFromRect ToUnicodeEx MapVirtualKeyExW GetKeyboardLayout SetWindowPos GetMessageA ClipCursor TranslateMessage DispatchMessageA EnumChildWindows ScreenToClient GetSystemMetrics GetClipCursor SetCapture SystemParametersInfoW GetTouchInputInfo GetMonitorInfoW GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW SetWindowLongW GetSystemMenu DefWindowProcW RegisterRawInputDevices AdjustWindowRectEx GetMenu GetWindowLongW InvalidateRgn ReleaseCapture CloseTouchInputHandle TrackMouseEvent FindWindowExW RegisterWindowMessageA SetWindowRgn RedrawWindow GetWindow IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos EnableMenuItem DrawIconEx GetDC VkKeyScanW AppendMenuW InsertMenuW SendInput CheckMenuItem DrawTextW ReleaseDC FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo ShowWindow SendMessageW PostQuitMessage SystemParametersInfoA GetActiveWindow SetMenu RemoveMenu CreateIcon SetMenuItemInfoW DrawMenuBar CreatePopupMenu CreateMenu CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu SetFocus TranslateAcceleratorW MsgWaitForMultipleObjectsEx MapVirtualKeyW GetUpdateRect PeekMessageW PostThreadMessageW ValidateRect GetRawInputData GetMenuItemInfoW SetWindowLongPtrW DispatchMessageW GetMessageW DestroyWindow ShowCursor SetParent GetParent

comctl32

RemoveWindowSubclass TaskDialogIndirect SetWindowSubclass DefSubclassProc

oleaut32

SysFreeString SysStringLen GetErrorInfo SetErrorInfo

shlwapi

SHCreateMemStream

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute DwmEnableBlurBehindWindow

gdi32

CreateSolidBrush BitBlt SetBkMode SetTextColor CombineRgn CreateRectRgn DeleteObject CreateCompatibleDC GetDeviceCaps DeleteDC SelectObject CreateDIBSection

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey RegGetValueW EventUnregister EventWriteTransfer EventSetInformation EventRegister SystemFunction036

ws2_32

shutdown send freeaddrinfo getaddrinfo WSACleanup WSAStartup setsockopt bind WSASend connect ioctlsocket WSASocketW recv closesocket WSAIoctl getsockname WSAGetLastError getpeername getsockopt

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

roundf pow round floor trunc __setusermatherr

api-ms-win-crt-string-l1-1-0

_wcsicmp strcpy_s strlen wcslen wcscmp

api-ms-win-crt-runtime-l1-1-0

_wassert _register_thread_local_exe_atexit_callback __p___argc _crt_atexit _exit _seh_filter_exe _register_onexit_function terminate _set_app_type _cexit _configure_narrow_argv _c_exit _initialize_narrow_environment exit abort __p___argv _get_initial_narrow_environment _initterm_e _initterm _initialize_onexit_table

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free calloc _set_new_mode

api-ms-win-crt-utility-l1-1-0

_rotl64

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale