Static task
static1
Behavioral task
behavioral1
Sample
MacroFlooding Tools V5.exe
Resource
win10-20230703-en
General
-
Target
MacroFlooding Tools V5.exe
-
Size
9.3MB
-
MD5
c74b85f9cb33a0168e7fdd901c47b5c7
-
SHA1
6b6c4c91293e28143bd2226cdd9c66fc4c6711dd
-
SHA256
938d66d3ba5ef7bf99aa11df7c5ab689956917c96c466146de58bdcfa5940f3f
-
SHA512
ffbb18f39ddddeaed9e9023301b4869ac2e80ecf0c9051e2972286b779d6eaef8dd017640c871f6093c3ea061497b61d8dfa4bf8c25b4ce57a51e9c1bf43d65f
-
SSDEEP
196608:LdRN/PwmQduaSmJkWUSGquQd4sO2dRqkWmZnuj3zmUkOVw17NdXEugZLmwaMIaLl:Bw+YkWnFW39kO7X/LuVk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MacroFlooding Tools V5.exe
Files
-
MacroFlooding Tools V5.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.1MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ