E4Bootstrapper[.]exe | Triage

Resubmissions

10/06/2024, 19:27

240610-x569tsxhmk 9

10/06/2024, 19:21

240610-x2qgxaxdnc 9

Sharing

Copy URL Twitter E-mail

General

Target

E4Bootstrapper.exe
Size

36KB
MD5

dc618bb4a38e6e9347788e4aa58878b0
SHA1

4ca204ca692bef38b5ba96bd74493be18bf68acd
SHA256

9d7cf052119784f65aca998c6e0c87f662e9423e51e1a3475e83d24f3b3b47e3
SHA512

57c15811aa70a2e3d4111aa45e02be778559a55703eea841e4a969cea48d4d8d05df8dd45009194b5103409b3db5848b4a9ff8235ad7c9ba52bfb5aac8e863b6
SSDEEP

768:SpD7f29SqkmxqvmKtZjgtFJkkprUU2N9t096MYRrpYyah+:UD7ULo+KtZ0tj3prUdN3eK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
E4Bootstrapper.exe

Files

E4Bootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ