BoltBaitPackInstall610[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BoltBaitPackInstall610.exe
Size

15.1MB
MD5

d9852488c7d4f0ab74a9f201b0cbe5c2
SHA1

9210a5f91ee77f3581179d2d29305ad35910c2ff
SHA256

659b7c73d32d36d104b79e3ea3ddd14fce90496db181d1879a530ae56e22e2ff
SHA512

31be0bcf5d100aa476c182e38198fdaa5689208ad44727902506177b9a48af0e378fa7841c66870c4e18459941f4612352882a5b239e687d3f45fbb99bf7f14f
SSDEEP

196608:txuUl+Ox1NG1oeKImpRxoBkbIoPTdie6uRUqA1fFl/Fs4E6Z+v:brG1oeKImpRx/bIogfFLsYZu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BoltBaitPackInstall610.exe

Files

BoltBaitPackInstall610.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\BoltBait\Documents\GitHub\_BoltBaitPack_Installer_\Install\obj\Release\Install.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.1MB - Virtual size: 15.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ