Behavioral task
behavioral1
Sample
3a50e743c489aa22d3f1131e215a758b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3a50e743c489aa22d3f1131e215a758b.exe
Resource
win10v2004-20220812-en
General
-
Target
3a50e743c489aa22d3f1131e215a758b.exe
-
Size
30KB
-
MD5
3a50e743c489aa22d3f1131e215a758b
-
SHA1
3f59b019616f1be825fe8df684e1ea60bdc6defa
-
SHA256
f199a6d6f602e4030ba73dbad67852fa110e12eddf03a5b382d4f0fa78d6f26c
-
SHA512
36d43da9a8ca6aab81439a016c20f12b37f6612616f7e87dc63cff5c52bf58bcd170f8832b713f823e27bcea5061226f244c4ed4af276037b1205ba8a8fe9421
-
SSDEEP
768:S172poBiLfK2Ss/2q2P66B9QeytQZAERS:O2mBibK4/2PB9Qr2S
Malware Config
Signatures
-
Detects Smokeloader packer 1 IoCs
resource yara_rule sample family_smokeloader -
Smokeloader family
Files
-
3a50e743c489aa22d3f1131e215a758b.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE