Bamboo Bootstrapper[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bamboo Bootstrapper.exe
Size

57KB
MD5

80a7b32b6954a98919e984d9701d642b
SHA1

441f4991ec42cfe17fd2e5fa2f5cadf6dd2c5465
SHA256

db22e62a46f419a73c184db91ad0b7c46e85d93e1dea72c2b61831c50dbfbcda
SHA512

280011c19cae476a31cdb20bc5c494ffbab601d4d53abb457952bb1062ba0c265bbf32cf49ecbcef88dd678dfcd41ce8cd3dc9c1beea308c9969d04b6554e583
SSDEEP

768:tA5jXMa7JiOf/aDkikQAaYmfi/Avy5aUsSIComOour9qDd5:tRaIq/aDkzaRa5aRSIxeuhq7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bamboo Bootstrapper.exe

Files

Bamboo Bootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ