BootstrapperV1[.]19[.]zip | Triage

Sharing

General

Target

BootstrapperV1.19.zip
Size

1.9MB
MD5

c4f56f981bd109e0f90f95e60ba5e3c4
SHA1

f96ec46dea31a127f13effba57ab4caaf814570b
SHA256

1e1551129f56f0f52da5a7ba675eb1aacc8f0ca28118354d3d14f0ac50362b1c
SHA512

4f26d19202d0d7b83a9e41f0d8f0f6a3cb8844d6c2413c49937f0d29ff482fdcbde0d28603bfebe3e78873417031697eedc2ebe552bd65cc21c92936b7fb6b4c
SSDEEP

49152:q96Dl8Da2wQRbU8z/RQnjQmo5KqtmCZXw9+dp/GDHWK:0DapQRbU8zZQnjQmogqkCZXw9+/uJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/BootstrapperV1.19.exe

Files

BootstrapperV1.19.zip
.zip

Password: Solaraonfi
BootstrapperV1.19.exe
.exe windows:4 windows x86 arch:x86

Password: Solaraonfi

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 770B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ