Bootstrapper[.]zip | Triage

Resubmissions

06/08/2024, 16:53

240806-vd1lvsyapd 7

06/08/2024, 16:50

240806-vcm95syalh 6

06/08/2024, 16:49

240806-vbvmtsyakc 6

Sharing

Copy URL Twitter E-mail

General

Target

Bootstrapper.zip
Size

278KB
MD5

0340ed48ee20065dbbce291346a1ff14
SHA1

357820a7c990a9f0c0ce6e1cfa3df76b118ee811
SHA256

5b1ede3475919d0fee8e1d8739788a7c4e4b3cedbaa3482e27555dab53d6c8cd
SHA512

b475d70886e12f1aeaef1c06153ce631f5fe6c8ef5858b6654177779ac5a6ec1e620b7121debe23219bc3985ca0d85ad5d2db7fe825f131eb37666da9823ad75
SSDEEP

6144:DSV9gD40fS2CObfq2XwHzZX65IfUOZqEzf:Dw9gDlfSFK2UOZd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Bootstrapper.exe

Files

Bootstrapper.zip
.zip
Bootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ashtin\Desktop\WTF\SolaraBootstrapper\SolaraBootstrapper\bin\Release\Bootstrapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 793KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ