Behavioral task
behavioral1
Sample
step3.exe
Resource
win10v2004-20221111-en
11 signatures
150 seconds
General
-
Target
step3.bin
-
Size
30KB
-
MD5
4ef1a0100b404fbbf43faad52b5fcddc
-
SHA1
d72d5c4d72e41e6598c303beb083410eda378def
-
SHA256
8549c92105152d7f7cfc6ec16eeaad7f6663592c531227867158f0d2b01edb09
-
SHA512
09149d81e2a7045b96a838daf60db88bfb77ebeba95ce7eb9e89409f5482e926c53fb712105730a26134abd5de9958279c8127897d65206f9001f8562bd6f901
-
SSDEEP
768:OAUqYpNSIoKpDd1KM02kQhx4hOtFceWzYqvz0bOS:HLo8LKtd1PBkQD4UtFceWnz
Score
10/10
Malware Config
Signatures
-
Detects Smokeloader packer 1 IoCs
resource yara_rule sample family_smokeloader -
Smokeloader family
Files
-
step3.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE