Boostrapper[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Boostrapper.exe
Size

1023KB
MD5

c3f6abd0db55b3f0da2111b236540062
SHA1

b09c5ccad64241ce79abe33262f930a0f61d0b01
SHA256

7acc25d36599b376d4eee59e5fa6c68da581e9244785c874b9874a4db73c5a7f
SHA512

e1d29243b53c41366f5418a4d0b204086f065599e3a699c90486fbb34b230e08f18094e7d0ce497ee37f47e6238bfc6490a3e0c23eaac2b33fc19ccfd15b6bb7
SSDEEP

24576:3Lm9dv/m2ZErUWau0BKgHgColrDibPKY/xxNgYHZWDCJV:ypLi0B1gxrMP5gE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Boostrapper.exe

Files

Boostrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1021KB - Virtual size: 1020KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ