SolaraBootstrapper (1)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SolaraBootstrapper (1).exe
Size

77KB
MD5

a6742db6777af3d7c022cd5f8101a51e
SHA1

838e0b3d4c1e8f091d25fe20ada8a9af12a3c688
SHA256

54685bbad5d971b2c59c4d82b841f82864c0cc82bf1d61e5d38add0492fc90fa
SHA512

27b858b020016476bdde7b6acef405b9c1159a5ac7e996a7edc868e47d295bca3a021be8fb8544a04d2990ade29ecf3e244a954714e32b3f00f5c833c1d5773e
SSDEEP

768:rMr3sXenAUMdTkvMC3Oz+M1pb0xWy9E2HQ+KvkBmWH8VdMQVsPKbPikaitIZEbDs:Q6euBeMWOtpb0RxkAYHVCKbPiGIUxBc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SolaraBootstrapper (1).exe

Files

SolaraBootstrapper (1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

SolaraFixer.pdb

Imports

mscoree

_CorExeMain

Sections

n'zaLh!x
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ