Bootstrapper(1)[.]exe

General

Target
Bootstrapper(1).exe
Size 110KB
Sample260722-2fkrra11ct
SHA256 d0a18e2a595ad8d2ba39a279eea1df3b8c0f99704f902fcea173be1fb17a9ac5
MD5 c323e62535214b66b2193309129b3781
SHA1 664496312ea1043775d9b9d1b794cbacf3039e97
SHA512 7030f7a052d08c0ded05aa0efe0f98b4010b0721216501ed73e4b471f8018816fb128db59b4d9ac007ed109964e412f8e061d6a7b15a458248170c5cff12b8f6
SSDEEP 1536:zoym+ersPEJTZ3SLofBpycbP/7SqsfWqh3KAUo9OlSwZdA7vMi3o3x5keUCnCzbc:KBIykeybpIEDwZmO2lHFk
TLSH
T1E9B32A0AE5A3203DC3A3803ACB465545EEA27C6987998DFB63D68EF10CE55907F3D613
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bootstrapper(1).exe

File Explorer

Bootstrapper(1).exe

.exe 110KB

Bootstrapper(1).exe

IMPHASH 6778d2522f48fabfee8871c786e6bbe9
SHA256 d0a18e2a595ad8d2ba39a279eea1df3b8c0f99704f902fcea173be1fb17a9ac5
MD5 c323e62535214b66b2193309129b3781
SHA1 664496312ea1043775d9b9d1b794cbacf3039e97
SHA512 7030f7a052d08c0ded05aa0efe0f98b4010b0721216501ed73e4b471f8018816fb128db59b4d9ac007ed109964e412f8e061d6a7b15a458248170c5cff12b8f6
SSDEEP 1536:zoym+ersPEJTZ3SLofBpycbP/7SqsfWqh3KAUo9OlSwZdA7vMi3o3x5keUCnCzbc:KBIykeybpIEDwZmO2lHFk
TLSH
T1E9B32A0AE5A3203DC3A3803ACB465545EEA27C6987998DFB63D68EF10CE55907F3D613
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

82064

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WideCharToMultiByte GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetStartupInfoW GetModuleHandleW QueryPerformanceCounter SetUnhandledExceptionFilter GetCurrentProcessId

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove memset memcpy __current_exception __current_exception_context __std_terminate __std_exception_copy __std_exception_destroy __C_specific_handler _CxxThrowException memcmp

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc _set_new_mode

api-ms-win-crt-string-l1-1-0

strlen isdigit isxdigit

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-runtime-l1-1-0

_set_app_type _get_narrow_winmain_command_line _initterm _initterm_e exit _exit _cexit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit terminate _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Resubmissions

Sharing