Static task
static1
Behavioral task
behavioral1
Sample
BootstrapperV1.17.exe
Resource
win7-20240704-en
General
-
Target
BootstrapperV1.17.exe
-
Size
2.5MB
-
MD5
7a4e953332a2dfe1f0bd1f13578887b5
-
SHA1
0f6c449dffd329d264253cb5117aa52f30610b2a
-
SHA256
0582c743ef3b7c31deba7a100787d8fcfab3e99df77f2b826fe5ca78dbce6791
-
SHA512
f43f4e5eddd8f0260e6e1abcffff75b2cdb0e56b6e4d5f4281c5c6a9305afee43b0e5a51aef7d680e184d14149f08e98bb781985e1e3588ed2339710495b5b9c
-
SSDEEP
49152:Gsykag7dxWLY/ZmbBpRMrM1HyZVbC0+XhBzJ3MBR7Yx3RD64MNT3:kkXDXu1HaZCbRH32RUxBDM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BootstrapperV1.17.exe
Files
-
BootstrapperV1.17.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ