Bootstrapper (2)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bootstrapper (2).exe
Size

185KB
MD5

829f1f79e523754328e18854fb3178b6
SHA1

524ee2fb34359a2a339bf2f61aaeae19960e5ce3
SHA256

01a9e9273546e61af86c61f5294cf28d66a9ace1e4f2ddae944fea48bcbffc05
SHA512

db4faf54f438723b81de3ecfd13e93b6a3af35e7042941d1db9031e1ebe0ce32d309f2f82aa485995fa7f3f87a7de838646b3b9e01bca962ad51975c0324a972
SSDEEP

3072:NGETpghXqvLLdC3r4WHpsauInZ7oZi9aCP8U7Eu1voBGK:NVghXqTLder4WHpsapZ7QiDP1EcvoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bootstrapper (2).exe

Files

Bootstrapper (2).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ