BootstrapperV1[.]16[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BootstrapperV1.16.rar
Size

226KB
MD5

d1a725de67f0c95c9eb644c730b882ae
SHA1

c329c937931de3c580ca34df7b13d664d52b7c71
SHA256

6a2f0ace021386a80ab908f1ee74e2ab7e384807c11a79b199a042f1f4b85026
SHA512

6805b7d734f58f6aadc65f85a698b482d37dad5095c08bb633645554c69527f8a9775fafa1cbc946fde0f040087021a31ec7ac94f4d65751d1788749f87297c9
SSDEEP

6144:3gamtzaiy9f2tA8YgzVOGHf4elNDjdhufhcPbp:QamwivtA8YQOGHf4WND+Yp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BootstrapperV1.16.exe

Files

BootstrapperV1.16.rar
.rar
BootstrapperV1.16.exe
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 793KB - Virtual size: 793KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ