Flooder[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Flooder.rar
Size

114.5MB
MD5

fd3759a9fc3172f52b4b269c225d7a90
SHA1

7d5f8e878bd19823aed780f94b0ccb8f4d218bb4
SHA256

78579a62a2e29e8f73002c4b600ab2c6eb50b4952d193f1fcbeb3fdac68ead24
SHA512

0e8a20cb283d08b36edc7495ecc877ba92ec09a9729af55dd8c1d8681bb15505c3050f3beb9bd2d0ffcc5cd80d968a680ea797a665ca447b59287f95ce8a56bd
SSDEEP

3145728:JKn6HC1R5Mfw6ZViEP2kf0f4X0vAv/XyXYmmSPf1qhDB:JKdzOZViEP2u0mPyJn1qhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Flooder.exe

Files

Flooder.rar
.rar

Password: 1234
Flooder.exe
.exe windows:4 windows x86 arch:x86

Password: 1234

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 114.9MB - Virtual size: 114.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ