BootstrapperNew[.]exe | Triage

Sharing

General

Target

BootstrapperNew.exe
Size

3.0MB
MD5

f0808c46f3f8beca942c18e5ff0e737e
SHA1

f724dd3061a299af90aa55388992a9fc9a20f97b
SHA256

f583e11fae8f7eba302fa26cbe93cf42bebd67dca79368ff86f6ec3defca3b06
SHA512

52cdba2724bacfcf29f45b9b2b5e92eeb7c187558356ff702e486e4031d62143adbd83a6188e4879623d7c99f5f048f235cfdd2fd97764d9a803f437c2e31fdd
SSDEEP

49152:RVerDSYrnhY+89P75F2W7f2IZV0189oBVTBSPLZpwM7hRYkbZJambGlkP6:OD7q+K7X2m/V03TBSPDwMLYkzrGlb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BootstrapperNew.exe

Files

BootstrapperNew.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ