Static task
static1
Behavioral task
behavioral1
Sample
boomberang.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
boomberang.exe
Resource
win10v2004-20240221-en
General
-
Target
boomberang.exe
-
Size
2.1MB
-
MD5
e2cb69b17ffae27a0095420452dc6e65
-
SHA1
432f972cf9b93478e041774472f18d9fa7f91748
-
SHA256
7e27f1d3e7b7df6cd350288e9e604aed2b6deee2d664e5b9727e8bbee0d3c482
-
SHA512
693854bd31120aa77332321685f2bb7dcb55272228e446d13a0b7f0bd58708d96bd9ed05a099518fb64729e341ba2a5330054e94ffe2b60e02f0900b77fbe133
-
SSDEEP
49152:hnFO7zRCX9ztuWNHKDmYt1ta9sk/IRUn:LMWNqlX23
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource boomberang.exe
Files
-
boomberang.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ