SolaraBootstrapper[.]exe

General

Target
SolaraBootstrapper.exe
Size 956KB
Sample240704-pr4yjsygla
SHA256 3ec5e88b1a03ea20d8c599e6cee740a161ceb81421e73f5a9704f43b00f894c8
MD5 6d6c771046cade0d055027a7f406169c
SHA1 2d02ce1778b7ced7f910e08f179da6003fea42f9
SHA512 97ff1969c9af04cad9c6c50dcffc39bdc20124e04cf705762ffac1985a26a792cbb29598b76f468b1d2086820602452e252bc4eb0c13884d0e3d0c69fe01e07b
SSDEEP 24576:ORa2dQCtw4JoRuaN70d73wEJ9OgkNPBGt9OXa:6w4JoRuaJVe9OgoXa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SolaraBootstrapper.exe

File Explorer

SolaraBootstrapper.exe

.exe 956KB

SolaraBootstrapper.exe

IMPHASH 56baef533a2c1ed14f3f4ef31918aea1
SHA256 3ec5e88b1a03ea20d8c599e6cee740a161ceb81421e73f5a9704f43b00f894c8
MD5 6d6c771046cade0d055027a7f406169c
SHA1 2d02ce1778b7ced7f910e08f179da6003fea42f9
SHA512 97ff1969c9af04cad9c6c50dcffc39bdc20124e04cf705762ffac1985a26a792cbb29598b76f468b1d2086820602452e252bc4eb0c13884d0e3d0c69fe01e07b
SSDEEP 24576:ORa2dQCtw4JoRuaN70d73wEJ9OgkNPBGt9OXa:6w4JoRuaJVe9OgoXa
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

181121

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\7r16ae8zp\output.pdb

gdi32

SetPixel

user32

OffsetRect ReleaseDC GetDC

kernel32

CreateFileW HeapSize GetProcessHeap SetStdHandle VirtualAlloc WaitForSingleObject GetModuleHandleA CreateThread GetProcAddress FormatMessageA WideCharToMultiByte GetCurrentThreadId CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetExitCodeThread GetNativeSystemInfo EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LocalFree GetLocaleInfoEx MultiByteToWideChar LCMapStringEx ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW QueryPerformanceCounter QueryPerformanceFrequency SetFileInformationByHandle GetTempPathW InitOnceExecuteOnce CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetModuleHandleW GetFileInformationByHandleEx CreateSymbolicLinkW GetStringTypeW CompareStringEx GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess SetEnvironmentVariableW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetCurrentThread SetConsoleCtrlHandler FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW WriteConsoleW

Sharing