Bootstrapper_1725724037599_1sly5[.]exe | Triage

Sharing

General

Target

Bootstrapper_1725724037599_1sly5.exe
Size

146KB
MD5

bc832d4fef741681578a87eb5d95b292
SHA1

75a89d287b15af8c6b8bcd9fa7887badc1850c5d
SHA256

5aa9d099dfc103dc52a33655e57845c6084b5d6bfab65abf4f3daea9911c613a
SHA512

270298becb80e7398ee608c780185caa6cfe1b48319c87302efd1fbc17f73f5acf9926295420e3dc8caeaa6e80f57db235e0d9adc2e37dda674d6d85c01be4f8
SSDEEP

3072:8PCyYwC+M2FEv80IZOA/CyYwC+M2FEv80IZOAU80IZOA4:ghY7X2Kvh4hY7X2Kvhvh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bootstrapper_1725724037599_1sly5.exe

Files

Bootstrapper_1725724037599_1sly5.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\danie\source\repos\debug\debug\obj\Debug\debug.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ