Static task
static1
Behavioral task
behavioral1
Sample
WaveBootstrapper.exe
Resource
win11-20240802-en
General
-
Target
WaveBootstrapper.exe
-
Size
949KB
-
MD5
98182dea6c9dd0f1321e3ad5961c8852
-
SHA1
eba97434001073ec52a54187207536ac781a3046
-
SHA256
1722709a221598e16cbc09e7d77b1ee1fdd9d61c9b70ddc31b7db5052935c40e
-
SHA512
d66fd5c83d96f0ff563a6860b823f1bc5f33605a1888ad69cf64c887b82ecff1f6efd6b3a41726489c1765c507e094fce5a39ea1b477b6e79fe2604f8b7ff1bc
-
SSDEEP
24576:9viinbT+yFoBZDI0BNZRQM+tkUkASmLzviinbTf:EinbT/aBNHR+tkhmminbT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WaveBootstrapper.exe
Files
-
WaveBootstrapper.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 742KB - Virtual size: 742KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ