The Voidstrap exe (Voidstrap) Voidstrap File Malware Analysis

The Voidstrap.exe (Voidstrap) File Analysis

Updated 1 month ago

Checked by Malware Check

Voidstrap.exe

Hash Type	Value	Action
MD5	267c35a4b0d3cf9906180d9fbda1c0ff
SHA1	9dec4181a295df654cb5bdc1882bf4ff82f4edd8
SHA256	5035e8dfd94c836afac44b606f3db1257837222ba4787963f92c543a89008ae9
SHA512	661dc698c76e61ad1d0c76e9fbd724677af03ea2ee32cb07d382146144164b6a3764267714176182c5832a26a0a27d8ce9d784240ac860d329d6a82160bfbbe2
ImpHash	70d2e884fa127843c5bcbb53da86b6c8

Hash Type

Value

Action

MD5

267c35a4b0d3cf9906180d9fbda1c0ff

SHA1

9dec4181a295df654cb5bdc1882bf4ff82f4edd8

SHA256

5035e8dfd94c836afac44b606f3db1257837222ba4787963f92c543a89008ae9

SHA512

661dc698c76e61ad1d0c76e9fbd724677af03ea2ee32cb07d382146144164b6a3764267714176182c5832a26a0a27d8ce9d784240ac860d329d6a82160bfbbe2

ImpHash

70d2e884fa127843c5bcbb53da86b6c8

PE Analysis

Basic Information

▼

Icon	Hash: 49672bd7d42289883e70578724a81e0c Fuzzy: 450bff1d5240c4f53d1965da02c52f17 dHash: fc4c1c3cbebef8c0
Image Base	`0x140000000`
Entry Point	`0x1405c30d0`
Compilation Time	2025-09-25 19:23:21
Checksum	0x00000000 (Actual: 0x04a13432)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	17 libraries
Exports	5 functions
Resources	12 Resources
Sections	10 Sections

Version Information

▼

Translation	0x0000 0x04b0
CompanyName	Voidstrap
FileDescription	Voidstrap
FileVersion	1.0.7.1
InternalName	Voidstrap.dll
LegalCopyright
OriginalFilename	Voidstrap.dll
ProductName	Voidstrap
ProductVersion	1.0.7.1+8fcd33f40ccfca05e237779154c04fbe1c0da7ab
Assembly Version	1.0.7.1

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	6,347,772 bytes	6,347,776 bytes	6.45 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A1D7EB02A9167D4CE2445CD8AB4B9D5F`
`.CLR_UEF`	`0x0060f000`	221 bytes	512 bytes	3.09 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`5EBCB3329265E31FF982320E06AA5D14`
`.rdata`	`0x00610000`	1,567,380 bytes	1,567,744 bytes	5.67 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`FFD2EA54616C073F2C9879F73753F6D8`
`.data`	`0x0078f000`	130,884 bytes	38,912 bytes	3.33 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`757D68822E953F07DBAF1E387A9B6E5E`
`.pdata`	`0x007af000`	221,340 bytes	221,696 bytes	6.48 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`24EBEC3E4F69E6E77799B9A51633076D`
`.didat`	`0x007e6000`	56 bytes	512 bytes	0.41 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`6C49D0E8E85B00DE89F1B15EBEF69A20`
`Section`	`0x007e7000`	8 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`_RDATA`	`0x007e8000`	78,344 bytes	78,848 bytes	5.48 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`617430A8CD708DDA1865FEE2910D8A1A`
`.rsrc`	`0x007fc000`	1,523,700 bytes	1,523,712 bytes	6.45 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`315BB2713265E295EC514AA38A2BF4A7`
`.reloc`	`0x00970000`	32,312 bytes	32,768 bytes	5.45 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`FA630AA996360931256D94E737A5D87E`

Resource Analysis

▼

Total Resources: 12 (1,522,834 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	6	171,820 bytes	11.3%
RT_RCDATA	3	1,347,024 bytes	88.5%
RT_GROUP_ICON	1	90 bytes	0%
RT_VERSION	1	792 bytes	0.1%
RT_MANIFEST	1	3,108 bytes	0.2%

Certificate Chain Analysis

▼

Certificate Information

Product	Voidstrap
Description	Voidstrap
File Version	1.0.7.1
Original Name	Voidstrap.dll
Internal Name	Voidstrap.dll

Certificate Chain Summary

Microsoft Windows Code Signing PCA 2024 #1 Primary

Validity Period: 2024-08-08 21:36:23 → 2035-06-23 22:04:01

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 1C 48 9F 81 DF A1 B0 B7 77 00 00 00 00 00 1C

.NET DAC #2 Chain

Validity Period: 2025-05-08 18:23:58 → 2026-05-06 18:23:58

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 5C 91 BA DE E1 AF F7 5E 70 00 00 00 00 00 5C

Microsoft Time-Stamp Service #3 Chain

Validity Period: 2024-07-25 18:31:11 → 2025-10-22 18:31:11

Signature Algorithm: sha256RSA

Serial Number: 33 00 00 01 FA FB 3B 44 D3 77 33 C6 D3 00 01 00 00 01 FA

Microsoft Time-Stamp PCA 2010 #4 Chain

Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25

Signature Algorithm: sha256RSA

Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	Voidstrap.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-12-02 06:00:31 UTC

The Voidstrap.exe (Voidstrap) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification