Static task
static1
Behavioral task
behavioral1
Sample
Boosty.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Boosty.exe
Resource
win10v2004-20240802-en
General
-
Target
Boosty.exe
-
Size
8.0MB
-
MD5
03d0db27915c1e5a20b24e79b0602b97
-
SHA1
d0fcf56f914f331f809921476066e4c2cf8c7b4d
-
SHA256
658c38008a7234d7c195106d7bae3970f653522445811fdb9695a0403a13e832
-
SHA512
8e0b4ca240fed5be1d563dfc0103ebafd5a6488c951849ca01701b7149846afc1a34ff833adf72dfd4f9c956b7b73dfff08a9fcf9aec6b745505b0893540d9a3
-
SSDEEP
1536:k4KUggoz7yeVnbOY21oykhrfQrnEfo1F:ki1ozTpSVCncE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Boosty.exe
Files
-
Boosty.exe.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7.9MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ