BoostTool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BoostTool.exe
Size

31.3MB
MD5

33f4681e6324e19e2eb7f226db42441c
SHA1

0b9ab1f198e26c999b5fa912c0001a01751c5316
SHA256

11f205eee9f8f003066ac5b04b662e6398a8f7c982a52b9fca9e281dcbf0811c
SHA512

2c6caf634d6c5f2bd489410704cb14c6f09925f5a4a2688e31bd018ad0595e93bfa94fbcb62ece85872e7c0b3d4f6d8ad1c6fec3018b3ad3c9d0f439ba4ae52d
SSDEEP

786432:I1c5QI8Rsag2T+vEjXmpqsdwhGpjXeyCo4nPAv2:Ie+I3ag2T+vhq+ssXerB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BoostTool.exe

Files

BoostTool.exe
.exe windows:0 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

Pixens
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Pixens
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27.9MB - Virtual size: 27.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ