Static task
static1
Behavioral task
behavioral1
Sample
Bootstrapper_v2,21.exe._.exe
Resource
win10ltsc2021-20250217-en
General
-
Target
Bootstrapper_v2,21.exe._.exe
-
Size
3.5MB
-
MD5
331b2ea924bbf9e736df0d7f346c7681
-
SHA1
2e5842495b7ee2e2821d69910e1d0eb3c65ea5fb
-
SHA256
9576143077300fa764d387afea25930bbfcc01bdb23a01dab704bc071fe4e8aa
-
SHA512
b170708ee36fdd42464502640648bf76aee4c090088a16da9288bc2904c854350016341a9c4adb7d23608d12373c052c8ab1e82a740cd930aab72c3977731694
-
SSDEEP
98304:2LwsX+LXl+Ah9AvIEQikn29ik5sY45yM4/fyxLXsccktwt:7nLX4AbcITipJ5145ygzs7Qi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Bootstrapper_v2,21.exe._.exe
Files
-
Bootstrapper_v2,21.exe._.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ