Behavioral task
behavioral1
Sample
7e057353f31e374c964a61d9364b9b55017fa9bec62a2717b7d527773a36e6ab.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7e057353f31e374c964a61d9364b9b55017fa9bec62a2717b7d527773a36e6ab.exe
Resource
win10v2004-20220901-en
General
-
Target
7e057353f31e374c964a61d9364b9b55017fa9bec62a2717b7d527773a36e6ab
-
Size
30KB
-
MD5
0e1800e4c50951aeebdf95d8e37dd738
-
SHA1
e69af9f01880a973d4235582a5abf887b494f73e
-
SHA256
7e057353f31e374c964a61d9364b9b55017fa9bec62a2717b7d527773a36e6ab
-
SHA512
dedf798c5ec483988dcc718d378bcc49d58b0b3e1624624ca814476b3d260ab2019ed6f0a02ad8c639a5471b2fdd308cfe906caee12991b99ce6bda1fa8c98fe
-
SSDEEP
768:hG7spfR8RX35MzADt9JgXAtL9q3eDXBQjN:E7CsBDt9Jbl7C
Malware Config
Signatures
-
Detects Smokeloader packer 1 IoCs
resource yara_rule sample family_smokeloader -
Smokeloader family
Files
-
7e057353f31e374c964a61d9364b9b55017fa9bec62a2717b7d527773a36e6ab.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE