malware_smoke_3193513502 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

malware_smoke_3193513502
Size

406KB
MD5

cd5764bfc0e290cfd31dff549b14c6f9
SHA1

b341ba455d14cd847216aedde0ab4aa7794af0c8
SHA256

49c2dd92fe9c73afca1f035b493b83758ff25c4ed4ae9875fce7f7dbd13e435b
SHA512

745357410e19670c5afaa24434b49fc308b174cedfddcf27edf9420d49977b7629700fd5139640de37010727ff625801bb71ddb2c72ba7efb053bb90c0694a6a
SSDEEP

6144:PjaP+mUqZePsg4/w0TbQBhWPyifet3Agp0q9ygbX+1RzDU8JRkpU:+PNTsG/sBhZisaMJcR/VJRkW

Score

N/A

Malware Config

Signatures

Files

malware_smoke_3193513502
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ