Bootstrapper[.]exe | Triage

Resubmissions

05/08/2024, 20:31

240805-zatrcsxekp 3

Sharing

Copy URL Twitter E-mail

General

Target

Bootstrapper.exe
Size

271KB
MD5

4b8abef5e5ea71114f9611213825ae52
SHA1

fba14ba0636a0ecd558c03ffa965f5b7974c3684
SHA256

f0162d341f5f91aeaee85e4f38875f22f27ac126ef278047cd6fb0f86ca9a814
SHA512

1cff0b7981fb2eb41503e93a1dd9a94319264c7b5bc1522a0c04637809581a0e458cdb94f7bd40ec11999a70d24a37000f0ebc9d6e39a33c4497bc535414acaa
SSDEEP

1536:70XQCsOyeYVFZAEZJ50B2JqzqubuuADYqbM2lKv0BCarF4SGb:SK9JJne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bootstrapper.exe

Files

Bootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\whisp\source\repos\Bootstrapper\Bootstrapper\obj\Debug\Bootstrapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ