SolaraBootStraper[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SolaraBootStraper.exe
Size

192KB
MD5

589530c2eadc2077bb8e13ed7db2e946
SHA1

4a5517d3645b14edd3ce33688d21605a41590d68
SHA256

fe73d864fb1853da1b239abf1084a30f7a2c0f91c47c3248f18911ae8a5713f3
SHA512

9a61637736dabbfaaca012c2165daa05f0c5d832d34ca7197bd40021e155385c546e761484f57a1b17fd9509f989a63c8c1c649e5cb7e9e9c4d62f69c5ab745f
SSDEEP

3072:vfwERqXHm4YiFft5mkn/LXVYL8ZsTWq3w/jhlhE11yDJf+gdouPafZE4bZNfsn:AERq3NFfxn/TIv6VlWqD1RafZE4FNfs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SolaraBootStraper.exe

Files

SolaraBootStraper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 190KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ