IconBootstrapper[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

IconBootstrapper.exe
Size

13KB
MD5

e3c18b9a8788a2b1b43e5ecbd894ed8c
SHA1

d13da1ff3e8f742d3b909fa903bc5b3ebb6a1f92
SHA256

0cb3a3a229d3b2244dda9ec6f1ea376dd55203a1ffc826364f14faea68a128ff
SHA512

15a7829e1b01e41dff7a3fec4059eedac89a528643b9bd35125477d8610c90081391a4c069084a13ff15595c3029c2b3c171a914521b5fb2c2e14b269edac0ff
SSDEEP

384:8m70CujCH1fevlFPydEfp9uLWlrHGVuV:8mHumVf2/GG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
IconBootstrapper.exe

Files

IconBootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\tomch\source\repos\WAVELEAKEDLOLLL\obj\Debug\WAVELEAKEDLOLLL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ