Static task
static1
General
-
Target
Bootstrapper.exe
-
Size
800KB
-
MD5
91ad601ecb40077d46f0a4453153fcff
-
SHA1
cb737249dfc655cb5afebaa8aaae3fc29f630d3f
-
SHA256
b7dabeca3d1900d158ae96d1be8a1bc1dc029efe4e51bc06115c185b358c4610
-
SHA512
7441c3a56c03935117b6d339e152b1ed3b327125797abf1c5548e4d82603353393a46349417c832db83d43ce688220752dc9ee30ce09856c9c97677c965d64a4
-
SSDEEP
6144:tufD+dcocz5ljbiUvgE4N8I6ovujRl3mFzA2J0qZ3e82Zavp/ijHrG:t0zVvgDNMoWjTmFzAzBoc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Bootstrapper.exe
Files
-
Bootstrapper.exe.exe windows:4 windows x64 arch:x64
Password: deferer
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 797KB - Virtual size: 797KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ