SolaraBootstrapper[.]exe | Triage

Sharing

General

Target

SolaraBootstrapper.exe
Size

225KB
MD5

b1121bc1ea82cc51a2ddfcac09d4c761
SHA1

a263b851d4a71383883ba39a5c961f0d551df8c7
SHA256

b49005f5cfd38e806b9d74431a8f0df82c76164ef4cb866b07a588fdcb25cf6a
SHA512

f0fdf56d57ee478a3252435af895061b1a19a46cdd1573f2c009e5909f461fd8336303e1d80f85ea0d6c433dd25f7cd03167b231953d890a1513db2be6e99ccb
SSDEEP

6144:ekQZwBP4jyIUm6ODtfByvRoEi/FtEbfTMgpfg6GHV+E:ekQZu+yIJDtfByvRoEi/bEbfTMgpfg6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SolaraBootstrapper.exe

Files

SolaraBootstrapper.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

5
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ