AstraBootStrapper[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AstraBootStrapper.exe
Size

202KB
MD5

e01824c567679e25c2a729d49b2cb98b
SHA1

12a5185d78cd1beb26acc38f5e3e91851ae8f131
SHA256

f2d18f551b5613eadecef5e361c19d1e320760d8539878ea1e17eae940f44a40
SHA512

c43bd5ee6141f409dc822686e1c7914183ed77e534bb116cb9e1bd097ad6dc3f7d6a707d7d9f4b5933c9cfde0a6ebfe79aab1242537ac78959c016558dd022f2
SSDEEP

6144:4tCtmUSFCyOhvnoXYxGo8Prd2HQOXbS2e8ka:4tgSFCHZocGjPrW/XbQa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AstraBootStrapper.exe

Files

AstraBootStrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ