Static task
static1
Behavioral task
behavioral1
Sample
Bootstrapper.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Bootstrapper.exe
Resource
win10v2004-20220812-en
General
-
Target
Bootstrapper.exe
-
Size
7KB
-
MD5
a098b6e0f4dde12093ec9991e609d13a
-
SHA1
39ebe6e7695d5112f94549f4656dcddd433cd18f
-
SHA256
3c5dd47e9c81af12306b443f487f1f0026787f647821ad1efff4047bb390f65e
-
SHA512
966bbb3bc49a86fd8335a48497118fed83adb99b1547be5274ab934ef04453d325f3adf58c90b2ecfc2ffec592340a7f16fda37611d0ca03a0aa4abe0a5bc02f
-
SSDEEP
96:B/fsKmkGk0rcjt4gIlBa4iV2dViKsnxadW5yoJKKhSdzNtr:fzJ4dWqVidnxas5yoJKKwX9
Malware Config
Signatures
Files
-
Bootstrapper.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ