BootstrapperNew[.]exe | Triage

Sharing

General

Target

BootstrapperNew.exe
Size

3.0MB
MD5

947b2e2a6693af67ece123cfe340eb74
SHA1

9bd9fb6e69280803d04de5e8a5ebd4b7b06bd0f4
SHA256

1240f27d96a37ba8ca19750db7a59c8f26b9f674ef09429015e80541dc9626e4
SHA512

21cc0e26dafb692e552564c22664151a7c94ee0db373113562cf4e7872eac9c6d1e2a6df878109da0ccf5a2649a1cea4f5648573cdbb2969132fc4aec42e8951
SSDEEP

49152:PZ7PB/tu/eMNAAQ7irIi7X/GSOj6SrCxGVCjb+poSAF+Ji6yHoeUgAtHM6zV:R7PB1u/es1+IGj66CAVCjbIAEg6GoTJN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BootstrapperNew.exe

Files

BootstrapperNew.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ