SolaraB (2)[.]zip | Triage

Sharing

General

Target

SolaraB (2).zip
Size

5KB
MD5

1dda11cf804307d4e3725764be9d62c6
SHA1

bfc3100ea03067a069b9417695aab7c6951d1346
SHA256

662ac096440ba88fd9a8c647b4ba01ed2199aa30d9ff8435c45dcd4899dac0d1
SHA512

e6486ec14c6d43c1d8b0cd91cf13c4c6561407190f241a6bc7d782e6f7e8eb2484cf83bdb4218b2a83d465d38c70963b72f4a10b5cbf95fd9b9d5d8273a4f8fc
SSDEEP

96:S643b11j3vs+ieHBgcCXhzWYQ1NJGQ7S8SnV8xT/KiFlg5YNwMHv5Nb:S64rEKhgcghDY4Q7WV8t/VG1ob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SolaraB/SolaraB/Solara/SolaraBootstrapper.exe

Files

SolaraB (2).zip
.zip
SolaraB/SolaraB/Solara/SolaraBootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Ashtin\Desktop\WTF\SolaraBootstrapper\SolaraBootstrapper\obj\Debug\SolaraBootstrapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ