Behavioral task
behavioral1
Sample
e4dad2f741efb9b0afc7e44cc3978907992b737faf34da59002ba3fe72c19692.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e4dad2f741efb9b0afc7e44cc3978907992b737faf34da59002ba3fe72c19692.exe
Resource
win10v2004-20220812-en
General
-
Target
e4dad2f741efb9b0afc7e44cc3978907992b737faf34da59002ba3fe72c19692
-
Size
29KB
-
MD5
7405c3dc85fce1a00417326ed24651a5
-
SHA1
07c5fcf13baebb30112d38c61a86021c5bf9e40a
-
SHA256
e4dad2f741efb9b0afc7e44cc3978907992b737faf34da59002ba3fe72c19692
-
SHA512
717d12c8c9bd2df5d42ba95a4f8eed0c936e699378181ddcb66594f6b55186f1895806717be02df4f66fc152be5841a574914b0ea00ba2ea98f7161fc0d5bcb1
-
SSDEEP
768:OAUqYpNSIoKpDd1KM02kQhx4hOtFceWzYqvz0bOS:HLo8LKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Detects Smokeloader packer 1 IoCs
resource yara_rule sample family_smokeloader -
Smokeloader family
Files
-
e4dad2f741efb9b0afc7e44cc3978907992b737faf34da59002ba3fe72c19692.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE