Xray Bootloader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Xray Bootloader.exe
Size

9KB
MD5

a087a05eb5f68dfe5bc3944a46baf36f
SHA1

2bb97c988facf540acb840918e2f3d2f486f2d86
SHA256

cc64b27fbc3c6c7d858511745d059cd94bf9220222dadecd27ae2d85e675ec3a
SHA512

e6bc4b0cc09bc04730f70d8b49448cedc34766a3586aaa0b3f4dd2f7b57d04ea408b4dc416d23f8d2bdc4d17435fdc74c0eb4299fac4774d955c998b500c6be1
SSDEEP

96:bj/DFOyQAdaxNNPp4JG+iBnxoQRALuS9xL2fkAwdlXtVtd8IdVo9P7JQghHAGBzj:b7aZ4JG+sBALuS32WXtp1VQPdQagGD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xray Bootloader.exe

Files

Xray Bootloader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Lenovo\source\repos\Xray Bootloader\Xray Bootloader\obj\Debug\Xray Bootloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ