2022-12-06_Smokeloader[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2022-12-06_Smokeloader.zip
Size

59KB
MD5

1ab5f41b5e3615c2604d5ce4c24eaa4b
SHA1

06cea0d3f52c55f4d78fb97018ac7ff63aa8b6d0
SHA256

724fcf28fbfd2ac54bc81bda6cc31959217ddbb56a3c47d8b3970e9cbf2cf7e0
SHA512

60aacd0a48f624ab063c9e9c8cec1c87eda0f1bad8aeb12a3f4bec3e5e1bf8b9cff07ea1a4af224cf16df220cdaf1136b659c4418b3da3ff3a8b4b5d4ea71c17
SSDEEP

1536:ZuJ1QkIFWhPIOk6JsB/OuiMwgnIb2EOvJaMo0lv4Ny:ZuDcUhPIr6Js/rLEOhH

Score

N/A

Malware Config

Signatures

Files

2022-12-06_Smokeloader.zip
.zip

Password: infected
8do0w.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ