Xevo-bootstrapper[.]exe | Triage

Sharing

General

Target

Xevo-bootstrapper.exe
Size

866KB
MD5

ced772286eabb38ef955a3df63979754
SHA1

eea0fc2849d82b213fe603de8c5b452e7714b5b3
SHA256

709b859894e9d3a4cfe0c194738ca60a5747a0ace6b5dc8786c28825f257b123
SHA512

a3fb03ef9a642d4d024d7979a98cf3d34670988648e37c0ce93376dcec59aca3121e24d0e46d81bcab444ce7d9d6e4ba43004146bcc43246793696d7628d51bd
SSDEEP

24576:QAFbBbDZg8bjv4zk1iMuGaHknfPBAuGY+DsWZya:xPZ2vMuGasfPBeCWZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xevo-bootstrapper.exe

Files

Xevo-bootstrapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 863KB - Virtual size: 863KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ