Synvelo_Monthly_Customer_v5[.]2[.]0[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Synvelo_Monthly_Customer_v5.2.0.zip
Size 2.8MB
Sample261107-vp3klazxbs
SHA256 33084436be44770143cbcbb77ed819c491f3c5eec9867e7b930e66a426aa837a
MD5 67beae3ba5b97f9ae69ca5061857da81
SHA1 9363f57370157abce76016be799f52cb6dee870d
SHA512 95a89ad4d63e79aeb7d3b60b478756b698a18d7f1a8e735e5e8bdd9d2601dcec1fde905446fd90eea6c4349aa58f1d39d38e550c219db147b364ac5684f80fee
SSDEEP 49152:QpPcxxEbSXFtb2boc/8aJevtAMOHotlIPVikdCMK3ExyTwq2PwO2w56IjEhy5o:QpPcMbS1tSbpAvjOklIPpdCx3ExyCYOM
TLSH
T13AD53341CA43AFA1F24A029B3E091ABBB1F1C932B39B6491AFDE45B0DB137E50355137
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Synvelo_Customer_v5.2.0/充电空位提醒.exe

File Explorer

Synvelo_Monthly_Customer_v5.2.0.zip

.zip 2.8MB
Synvelo_Customer_v5.2.0/THIRD_PARTY_NOTICES.txt

1KB
Synvelo_Customer_v5.2.0/使用说明.txt

2KB
Synvelo_Customer_v5.2.0/充电空位提醒.exe

.exe 6.6MB

Synvelo_Monthly_Customer_v5.2.0.zip

SHA256 33084436be44770143cbcbb77ed819c491f3c5eec9867e7b930e66a426aa837a
MD5 67beae3ba5b97f9ae69ca5061857da81
SHA1 9363f57370157abce76016be799f52cb6dee870d
SHA512 95a89ad4d63e79aeb7d3b60b478756b698a18d7f1a8e735e5e8bdd9d2601dcec1fde905446fd90eea6c4349aa58f1d39d38e550c219db147b364ac5684f80fee
SSDEEP 49152:QpPcxxEbSXFtb2boc/8aJevtAMOHotlIPVikdCMK3ExyTwq2PwO2w56IjEhy5o:QpPcMbS1tSbpAvjOklIPpdCx3ExyCYOM
TLSH
T13AD53341CA43AFA1F24A029B3E091ABBB1F1C932B39B6491AFDE45B0DB137E50355137
MD5 SHA1 SHA512 SSDEEP TLSH

Synvelo_Customer_v5.2.0/充电空位提醒.exe

IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
SHA256 9e5bdb5077cf6207ce314ea9aa23ac40f1b9a7caa931c706a101306e0c61bf7a
MD5 949fa78da65924ab76bbadddcdac7ab5
SHA1 fa82a492790173a0681f1d8bd70bb9128dadfd32
SHA512 30f7e46e68dc8602f10650d1b7534f1b3098b9c7cd7822d1a2bfd9352edccc29abf59e65b40447eadb6616e8c8438e718d873bf149e792d47f3efb79acd1186d
SSDEEP 49152:EDxYOidtZ2Z/1hobeEbin8PgVskVD4s+6ZO6azrX7YyZoXIXj1KCK5KwDJZ1WybB:EDi1f4fceEUsCk6MzUy6dDJ7rsHlEd
TLSH
T1AF664903EC6518E5C1AED1358966A512BF307C885B3123D72B60F6287F77BD0AEBA354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

562624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

320KB

Virtual Size

32.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

68KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Synvelo_Monthly_Customer_v5.2.0.zip

Synvelo_Customer_v5.2.0/THIRD_PARTY_NOTICES.txt

Synvelo_Customer_v5.2.0/使用说明.txt

Synvelo_Customer_v5.2.0/充电空位提醒.exe

kernel32

generic