Static task
static1
Behavioral task
behavioral1
Sample
BootstrapperV2.exe
Resource
win7-20240708-en
General
-
Target
BootstrapperV2.exe
-
Size
425KB
-
MD5
243de9a991629f8ded3b708937f10281
-
SHA1
598f43cf568dd410e7d7f7587ad796a4701b68c0
-
SHA256
577acffd2b69db8b0fc1b33b54464293fe98bad61e4c6d75b5e1a4c4be13d80e
-
SHA512
e76d27e7e6850e9673bbd4685e7f4d423c843955917faad1690d537471192669a07e2915ce4d4356311ee27b21c0c3b9ea410cd96099e3ee035cb964aabc3a65
-
SSDEEP
6144:f2biw0pONo+1zNaNAMJQXVGd9qRKl9JrCa/41BMEdKp:+rPNoYzNui4qA0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BootstrapperV2.exe
Files
-
BootstrapperV2.exe.exe windows:5 windows x86 arch:x86
af1997c7384baa0282768936c00b569a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathW
SetThreadContext
DeleteTimerQueueEx
DebugActiveProcessStop
CreateProcessW
SetWaitableTimer
InterlockedDecrement
SetDefaultCommConfigW
GetEnvironmentStringsW
SetComputerNameW
GetProcessPriorityBoost
GetModuleHandleW
GetCurrentThread
GlobalAlloc
GetVersionExW
GetTimeFormatW
GetConsoleAliasW
GetVolumePathNameA
GetStartupInfoW
GetStartupInfoA
SetLastError
GetProcAddress
GetLongPathNameA
GetAtomNameA
LoadLibraryA
UnhandledExceptionFilter
InterlockedExchangeAdd
MoveFileA
AddAtomA
FoldStringA
OpenFileMappingW
GetFileTime
FindAtomW
FindFirstVolumeW
GetModuleHandleA
GetCommandLineA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetStdHandle
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
CloseHandle
HeapSize
RaiseException
user32
GetProcessDefaultLayout
Sections
.text Size: 277KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hozewaz Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.piju Size: 512B - Virtual size: 346B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xomejam Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ