C:\Users\abqhi\Downloads\RC7 Bootstrapper\RC7 Bootstrapper\obj\Debug\RC7 Bootstrapper.pdb
Static task
static1
General
-
Target
RC7 Bootstrapper.exe
-
Size
1.2MB
-
MD5
da36516bd0bffc703b6d1fd10f09bd3a
-
SHA1
0612886e30b2f5e21d318b65a6a7318b37b3ddea
-
SHA256
b3f651eb4479bc70d4c5873e0b337c729b3b047ee465b7fbb48460e47311450f
-
SHA512
09031633b1b9c6bb369f2a9f31046e8a66972c23a60dfca17d729178edf5c894a34c0d8621d9e12311f6fa08868e347fa6b2bb21d8d6242652662eac176195d5
-
SSDEEP
12288:8pHLFLQLFLoHq/bgdwwRF4nybg4tvKqpE:8rqpwRF4nX4o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RC7 Bootstrapper.exe
Files
-
RC7 Bootstrapper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 893KB - Virtual size: 893KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ