Static task
static1
Behavioral task
behavioral1
Sample
BootstrapperNew.exe
Resource
win10ltsc2021-20250314-en
Behavioral task
behavioral2
Sample
BootstrapperNew.exe
Resource
win11-20250313-en
General
-
Target
BootstrapperNew.exe
-
Size
11.8MB
-
MD5
00bf4984f80c066ce8f4ecaa93c337bb
-
SHA1
4662aa890e8a64ead9b9f5b5129fae3ca0c5b60e
-
SHA256
952ad6a684a3c4bbc00494926a933c68707b80ead10eab3f096d252d9d054e9a
-
SHA512
f716f2675fa5d506e9d220dea8555c9133af43149fdfb484eaa5f1456446aea15faae78e4dd2162a27e7bf22cee95a369a8e299117ebb1d7627a178b0909799e
-
SSDEEP
196608:WboBI6F8e90gAT7Mad+xxaCSoh3Buv+6tA56+wDHBV7NeHExxX:Wb4P4T7MTxkC1Sv+UA58DHLi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BootstrapperNew.exe
Files
-
BootstrapperNew.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11.7MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ