Bootstrap[.]exe | Triage

Resubmissions

19/02/2024, 16:58

240219-vg1q2ahd28 8

19/02/2024, 16:56

240219-vfq57shc84 3

Sharing

Copy URL Twitter E-mail

General

Target

Bootstrap.exe
Size

1.3MB
MD5

6dee8100880589091e552b60de6d918e
SHA1

11d27bb8fd47dad64b92fda5f4f244efe1aca3f5
SHA256

4de0d42d3a9dddf2a4c001efb8e6854d2e7f936d39b31e0ad8da7b998b0a6c95
SHA512

69ec4aa511cdf4c81eb489e89cc0be052d464713ca99a565befe8af23af446ffde3e4c16ff3e352cbf2b737d487ced3946fa6e93199f0ea3663e97892f3e697f
SSDEEP

24576:ULLa1x269PyP1x269PypJkesQsYgujsvuYIBwBdg1x269Py:UL+1x269PyP1x269Py8es7YgYsBpg1xC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bootstrap.exe

Files

Bootstrap.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\slaur\source\repos\Bootstrap\Bootstrap\obj\Debug\Bootstrap.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ