Behavioral task
behavioral1
Sample
BootStrapper (1).exe
Resource
win10ltsc2021-20250113-en
General
-
Target
BootStrapper (1)
-
Size
3.2MB
-
MD5
0442d033d1e0b18c6dbf9e7f57039da5
-
SHA1
ee9b1d948d6b3237f3a64cda561d0efaa2a4e164
-
SHA256
16b9f580660a174e0d3f2b23cdf4de6fe82deefcd75192464bff2bd584a3c2b4
-
SHA512
7f9afb2ed2a87a2bd690ec41dbb7f2e62bb0b6c789df59ed0610adbec88c96bd1418ef36a52d8d18d1d9d47ae98bd0871673879f186ca14190259f286d80ee0b
-
SSDEEP
98304:lYsufBjM2jH5ayXnfvf1KXZFHwVExjMf/tLIMrTF:lYsGjL3NKXTH1VM+mF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BootStrapper (1)
Files
-
BootStrapper (1).exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE