solarabootstrapper (3)[.]exe | Triage

Sharing

General

Target

solarabootstrapper (3).exe
Size

343KB
MD5

31fa76d8541ad85f4260553c06fa9c90
SHA1

1e130a668a23c73fc1c0ec624bd1ca5683b736f3
SHA256

8d1d79b2baf7f16dafd46aa855e10e06013dcadbddb2ba60f28d6221cb5f87f8
SHA512

3190f16091439b9d927c1b5e6ac492211a7c3a2434f057fc0e3bf1d82af096490a4bf7e589c46ee22bd31cbf2f2639f3d89ea3d53ff9037b7707f74233edc20c
SSDEEP

6144:8Cnra+Rq8yfsW/JhAi0cDtPaeVlW5EBJaZeS7j49NSFGDz4ZQK0Y7LPn:8WrAFkqCi0maeVliETaZvj49EFGfBK13

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
solarabootstrapper (3).exe

Files

solarabootstrapper (3).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ