Bootstrapper[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bootstrapper.exe
Size

6KB
MD5

0e50841cda87563162515a6fef035800
SHA1

45b4359220413cd1b95c9ea7460b9b0cb22b5d92
SHA256

ca47b6696c613bfc65e243e54f83b4811b34a28d2ac52b78ef6af22ac4ab5337
SHA512

638b17a3ec488d4564487b85ffc4b7bb3d7fec08f57ad1ba8696bb0ac842de5fae053ffd78f7c5f9679677196d7ad0d204a80cecdc1c389959dc2361537ffbea
SSDEEP

96:hluKMUxH+Npd/6V2l/4e64x+sIWqEAzNt:h0KMYH6pd/6V2l/Ie+sI+C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bootstrapper.exe

Files

Bootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\dex\Desktop\roblox tryings\nick's bootstrapper v2\Simple-CSharp-Console-Bootstrapper-main\Simple Console Bootstrapper\obj\Debug\Simple Console Bootstrapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ