boot[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

boot.exe
Size

1.1MB
MD5

79ec632c0903080a51a859be27932f91
SHA1

6cfb97f7f067df951c4dc8f4e0c235c668afbd61
SHA256

ce84e49bbf0a9fa90a157f8f94bc7caa53306c8dc7a1b0b0f418d47653f8c65e
SHA512

8ee993495734ab2578377d6d442d6d366bed18737750a6415a54a6ebc4853a6926254794b9d04ca41ff62b728d8ed83fad6d792df233c7bbfc022b159711c896
SSDEEP

24576:aYqo763Qqgi4xlHE95BLDO7+uaviTVvLWbvwBqMZ:aKFxIBGaviRLKAJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
boot.exe

Files

boot.exe
.exe windows x86

a0aa405c258f13cf7e36ed64462b0191

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
ord17

msimg32

GradientFill

kernel32

SetFilePointer
CreateFileA
GetFileSize
TerminateProcess
CreateEventA
SetEndOfFile
HeapSize
WriteConsoleW
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CloseHandle
HeapReAlloc
DecodePointer
GetStringTypeW
HeapAlloc
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
GetACP
GetStdHandle
GetModuleHandleExW
ExitProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
GetFullPathNameA
GetDriveTypeW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
WaitForMultipleObjects
GetTickCount
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateThread
FindNextFileA
FindFirstFileA
DeleteFileA
GetLocalTime
FindClose
GetLastError
GetShortPathNameA
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetComputerNameA
GetWindowsDirectoryA
GetSystemDirectoryA
GetCommandLineA
GetSystemInfo
WinExec
GlobalMemoryStatus
GetVersion
WideCharToMultiByte
MultiByteToWideChar
ReadFile
LoadLibraryA
GetProcAddress
FreeLibrary
CreateDirectoryW
Sleep
GetModuleFileNameA
GetCurrentProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
RaiseException
RtlUnwind
HeapFree
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
GetProcessHeap
WriteFile
GetModuleHandleA
GetVersionExA
CreateFileW
HeapValidate

user32

GetAsyncKeyState
SetActiveWindow
GetWindowRect
MessageBoxA
ShowCursor
SetCursorPos
GetCursorPos
ChangeDisplaySettingsA
EnumDisplaySettingsA
PostMessageA
CallWindowProcA
GetDlgItemTextA
GetSystemMetrics
GetDC
ReleaseDC
SendMessageA
CreateWindowExA
DestroyWindow
ShowWindow
MoveWindow
IsDlgButtonChecked
FindWindowA
MsgWaitForMultipleObjects
MapVirtualKeyA
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
wsprintfA
LoadIconA
LoadCursorA
FillRect
GetSysColor
AdjustWindowRectEx
InvalidateRect
EndPaint
BeginPaint
TabbedTextOutA
GetActiveWindow
GetDlgCtrlID
UnregisterClassA
RegisterClassA
PostQuitMessage
DefWindowProcA
SetClassLongA
GetClassLongA
SetWindowLongA
GetWindowLongA
InflateRect
DrawFocusRect
GetClientRect
SetWindowTextA
DrawTextA
IsWindowEnabled
EnableWindow
GetFocus
SetFocus
SetWindowPos

gdi32

GetCharWidthA
CreateFontA
MoveToEx
SetDIBColorTable
CreateDIBSection
GetTextMetricsA
SetStretchBltMode
StretchBlt
SetPixel
SetBkColor
SelectPalette
RealizePalette
Rectangle
GetGlyphOutlineA
GetTextExtentPoint32A
GetPixel
Ellipse
DeleteDC
CreatePen
CreatePalette
CreateCompatibleDC
SetTextColor
SetBkMode
SelectObject
GetStockObject
DeleteObject
CreateSolidBrush
CreateFontIndirectA
GetDeviceCaps
BitBlt
LineTo

comdlg32

GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

advapi32

GetUserNameA
RegQueryValueExA
RegCloseKey
RegOpenKeyA

shell32

ShellExecuteExA
SHGetSpecialFolderPathA
ShellExecuteA

ole32

CoCreateInstance
CLSIDFromProgID
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
OleInitialize
OleUninitialize
IIDFromString

oleaut32

SafeArrayGetElement
VariantChangeType
VariantCopyInd
VariantCopy
SafeArrayGetVartype
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPutElement
SysFreeString
SysAllocString
VariantClear
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetDim
SafeArrayCreate
SafeArrayCopy
OleLoadPicture
SysAllocStringByteLen

winmm

sndPlaySoundA
mciSendStringA
timeGetTime
timeSetEvent
timeKillEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod

d3d8

Direct3DCreate8

d3dxof

DirectXFileCreate

Sections

.text
Size: 764KB - Virtual size: 763KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0aa405c258f13cf7e36ed64462b0191

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

msimg32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

winmm

d3d8

d3dxof

Sections

.text Size: 764KB - Virtual size: 763KB

.rdata Size: 144KB - Virtual size: 144KB

.data Size: 84KB - Virtual size: 104KB

_RDATA Size: 2KB - Virtual size: 1KB

.data1 Size: 2KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 31KB - Virtual size: 30KB

.text
Size: 764KB - Virtual size: 763KB

.rdata
Size: 144KB - Virtual size: 144KB

.data
Size: 84KB - Virtual size: 104KB

_RDATA
Size: 2KB - Virtual size: 1KB

.data1
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 31KB - Virtual size: 30KB