ShibaGTGoldBootstrapper(1)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ShibaGTGoldBootstrapper(1).exe
Size

54KB
MD5

3809ce158bad77addaa443ddd783d6e5
SHA1

930d0d9b85f79959e5a166515cf1a58ae35e3722
SHA256

94db96ceb58a482ba74e055e77e40139524c5e24fe8cece2c33a17eab377169d
SHA512

879c73511bc81cb279c2b481965acbcf5214a8cf0e7af41d90e0256dbda93b942bae5d474f5a7a1e04b663141bc0ffb80fa3f87bed46edef243aaf84d78d77c9
SSDEEP

768:5S3Y7mKt9WIgsWwI38t/cxRf+dTdzPOOUHBOYDblRuEArbHkNDt3fm5mUXmjRIy:AqDf0A/faOUkmblRudbH8tUm8i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ShibaGTGoldBootstrapper(1).exe

Files

ShibaGTGoldBootstrapper(1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

{EuehN
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ