Bootstrapper1[.]07infected[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bootstrapper1.07infected.zip
Size

306KB
MD5

fd14468438fdefcfe86fe12345245eed
SHA1

0c182bfd9d3f8988b8dd0ceea87e8978382cb96c
SHA256

ff8c37b8386d7dd7370744f4ef6ade2280ba32981d4ec954287c04dc35d4c1c7
SHA512

4b290cc361bc74094d2405e6030d5e232fd1ea9a6ca116d9cf15b3fe336b12d3221d53fe4f25c7b0f9d1c017bbeed339caf5fb60655f25a2a81f21ca9b6a454f
SSDEEP

6144:wQj9+1tanKgyVIZRkWwugvuwIHJU89bYEeCJ0RE42ep4xm5Z:wQjg1tsCaIvuVICD42E4xSZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Bootstrapper 1.07.exe

Files

Bootstrapper1.07infected.zip
.zip

Password: infected
Bootstrapper 1.07.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\rje\tg\2\obj\Release\ojc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ