Solara[.]rar | Triage

Resubmissions

14/06/2024, 03:22

240614-dw88aaxcpk 9

14/06/2024, 03:21

240614-dwbxsaxclm 3

Sharing

Copy URL Twitter E-mail

General

Target

Solara.rar
Size

5KB
MD5

ad892bad27ac8a29b4186f9029e2bdcf
SHA1

73c446d198c19233f41c41961c312776ba06fb35
SHA256

908e5cd92f486f6e84c0bb5c5b22969fccb2378d7ba1cea1e870bb0c7b9ae665
SHA512

3d6fa8becb2ebc1c216a25d9507ecf6a937f90c1fc818f6f14eee0e60244cf2f84b723ad85eda2f213ab45a2ad79c94b1c36cadb588983b0cd1a9813fa58d6df
SSDEEP

96:oY+gbJkinPK2Iwecv7JW28soEHN1+R/B/JBgScC5xaxzJzG6D6/VmJh5:x5Jk+K2zv7r1mBXkIaxNS6D6/Vmh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Solara/SolaraBootstrapper.exe

Files

Solara.rar
.rar

Password: 123
Solara/SolaraBootstrapper.exe
.exe windows:4 windows x86 arch:x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Ashtin\Desktop\WTF\SolaraBootstrapper\SolaraBootstrapper\obj\Debug\SolaraBootstrapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ