Behavioral task
behavioral1
Sample
8e4544b57a81e4d8e16873e7aeb3052002275bca06f740b99bb5def556d55783.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e4544b57a81e4d8e16873e7aeb3052002275bca06f740b99bb5def556d55783.exe
Resource
win10-20220812-en
General
-
Target
8e4544b57a81e4d8e16873e7aeb3052002275bca06f740b99bb5def556d55783.exe
-
Size
29KB
-
MD5
37743147520b360d4b4d52d10e1bd164
-
SHA1
f7381c9b6e2a2b3fc2617838b1e15f6df26103d5
-
SHA256
8e4544b57a81e4d8e16873e7aeb3052002275bca06f740b99bb5def556d55783
-
SHA512
84be73654e2329acc9f3773e7ca4af495255373a64d59585bce9652e752c4362ea913d66ff8b9ddba4d513a28199942f6c9526bee7249caa47c0e0d9724a95e6
-
SSDEEP
384:6b1gIpNuS6prkBBWwVrOy3iOZwLmZJmcyb/PF27y0TbesSyVonhflQrZznoQDKH7:e1gIpYh0WSSmjmBXMlbe4VuKoGKHu
Malware Config
Signatures
-
Detects Smokeloader packer 1 IoCs
resource yara_rule sample family_smokeloader -
Smokeloader family
Files
-
8e4544b57a81e4d8e16873e7aeb3052002275bca06f740b99bb5def556d55783.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE