C:\Users\Ashtin\Desktop\WTF\SolaraBootstrapper\SolaraBootstrapper\bin\Release\Bootstrapper.pdb
Static task
static1
General
-
Target
Bootstrapper.exe
-
Size
796KB
-
MD5
3af8103c6e2ba160987b5b4e87b231d2
-
SHA1
b65c5f0351e1689b7d1e1e68e2e443176831378c
-
SHA256
66cd57c5830bb579d017a0a7b4924e03a4177ba40c82045100da383ea2144946
-
SHA512
fc7c3e1326fbaee32066e567384c18abf7e85cbfa489a48fa25e0bcfb79d8f3f8f7e4e9a61e6c6f2a1203e15682fd35ab8c3d4988298b837f2854b7c7791341a
-
SSDEEP
12288:p2iqprGXZAIS8aysgethzoGQljjIcukly9wQ6alRlZUh:HUGJBSZttoGQljjfuCy9wQ6an
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Bootstrapper.exe
Files
-
Bootstrapper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 793KB - Virtual size: 793KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ