Static task
static1
Behavioral task
behavioral1
Sample
BootStrapperV2.exe
Resource
win10ltsc2021-20241023-en
General
-
Target
BootStrapperV2.exe
-
Size
70KB
-
MD5
869eb8101675b446f5d0494013b676ac
-
SHA1
bcf9b9deacbb90439ad920c565191e6d31dfa565
-
SHA256
e26cdf6b5b88b2bc91127406361c7ffc32090b454f7081dcaf11b15ed7da002c
-
SHA512
b551dcb11423e8b5ed54ac95052548d62b3d34c74b424c8a1320cb940425d0bca92bba501c1c82a3becf452df1a624b60a18a312537e0844e7ede7898acf5ad9
-
SSDEEP
1536:P3XvLmMO78lkuciRlikj9Vkt+3ybDjkYb91XRlpfsW26J5SJX94Xx:P3DmM08vTikDkt+CIYb9Z2qSJX94B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BootStrapperV2.exe
Files
-
BootStrapperV2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ