BootstrapperV[.]1[.]26[.]exe | Triage

Sharing

General

Target

BootstrapperV.1.26.exe
Size

851KB
MD5

eed39cddf604f91ccf7562544d9bba44
SHA1

e167c7a06e6d9e2802001104d0d11a30936c8be5
SHA256

5d4ab36f24de6c24810f68020afb4f1a68b95e6f089903be48a85ad53bfae318
SHA512

04852383134e86359c609847d9653f9fac7d3f2a3111aadfa2e53c476cc0c98f892cd2a57e8c2ece26ce7534d9a68a50b9701b47139004e05318389d78ac7b58
SSDEEP

24576:JtqBlzRXNJsmnKfT8yLzFzW8JmxhueqchE4YOF8Ie:J2VXNJfnWXV4xhRxEnOFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BootstrapperV.1.26.exe

Files

BootstrapperV.1.26.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 849KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ