Solara[.]zip | Triage

Sharing

General

Target

Solara.zip
Size

275KB
MD5

fc69b3bd005ad32c7e4d5bbcb83085b5
SHA1

b081326c2b4070c8253fdc1a62a229b12735050a
SHA256

77175abe03293dd2893b8808285ec09ac9d64f2092e483af9ba89390dc7bcd17
SHA512

bbc5afe497c56ea3a7d34ce891297e54b671d45fd70a12b4150c978da2e876f975776f3bcaaacc98bbf6a1f70e176231d6376af8a3042d2dd15b7446507532db
SSDEEP

6144:0LeCvE9HWATfiTOys52lG6RcRPsaTxsA4nDy6TxrqrHsK+BBWsUI:0LeCvPA7MU/P8Dy6teQrWFI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Desktop/Solara/Bootstrapper.exe

Files

Solara.zip
.zip
Desktop/Solara/Bootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ashtin\Desktop\WTF\SolaraBootstrapper\SolaraBootstrapper\bin\Release\Bootstrapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 793KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ