SolaraB[.]zip | Triage

Sharing

General

Target

SolaraB.zip
Size

5KB
MD5

c28893103f5e51ab91e36a083f8b5573
SHA1

7d2d2be83da6ab4a04abcf95473ce43e24e6255a
SHA256

aff796ebceec53197b5fa391d7693cd5577849d6528c4f22f9606f63dba6fa2d
SHA512

9322fc4099f07cb9a45b2965197653ed85c88661130d8f33268e2ec7a97dda014c76b8d9d218b3fbcdcee2597de0bf6325a9d4fdf3bd92cd00303baa47f36bf8
SSDEEP

96:gDvDM0etWUQ584M4Yikr0by9KQ/DYU32e2sez0:gDM4Y3r0W9dMe2su0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/SolaraB/Solara/SolaraBootstrapper.exe

Files

SolaraB.zip
.zip
SolaraB/Solara/SolaraBootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Ashtin\Desktop\WTF\SolaraBootstrapper\SolaraBootstrapper\obj\Debug\SolaraBootstrapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ