Bootstrapper[.]exe | Triage

Sharing

General

Target

Bootstrapper.exe
Size

797KB
MD5

4431cc5538d39fb9c499fc0341a1db01
SHA1

5b547b1fcb6982d79a487588534c4cc4867073c8
SHA256

64c8d087dd78291158fa3bada9c65ad2c6aa15b8c3a25324f9e71ae81c485666
SHA512

bb5b9a105852fc09c82c0d0872cdb907e7a44d8b9b7fd72f8474003e2e55340f74ba07d681439df935b728ea53b34dcad3cf438f8918a640ad65b65601606106
SSDEEP

3072:UTaFZMw6CyYwC+M2FEv80IZOA/CyYwC+M2FEv80IZOA0:yhY7X2Kvh4hY7X2Kvh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bootstrapper.exe

Files

Bootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\danie\source\repos\debug\debug\obj\Debug\debug.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ