Behavioral task
behavioral1
Sample
a73098a6b3db0ba29a660c287be364d5d676e9fece6495b8dfa90e48e29868fc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a73098a6b3db0ba29a660c287be364d5d676e9fece6495b8dfa90e48e29868fc.exe
Resource
win10-20230220-en
General
-
Target
a73098a6b3db0ba29a660c287be364d5d676e9fece6495b8dfa90e48e29868fc
-
Size
29KB
-
MD5
1f2126ce6f8cc98a2159a33fa81b4285
-
SHA1
aaf914b5e5f7d79ab387a07019033bb28c4f0956
-
SHA256
a73098a6b3db0ba29a660c287be364d5d676e9fece6495b8dfa90e48e29868fc
-
SHA512
621db8b88c8556c2dcd3401b38bb2b16d5cd75f54bc8fe8d1ed77ea699dd43776e3bb76c78bb86c1098951666b181808f0565e78666d534f0a469daac7c1f377
-
SSDEEP
768:khafATBfqNGiP+x800ekJHwCukdqS+/td7N:cy2BfqNGMo/vpkQSOb7
Malware Config
Signatures
-
Detects Smokeloader packer 1 IoCs
resource yara_rule sample family_smokeloader -
Smokeloader family
Files
-
a73098a6b3db0ba29a660c287be364d5d676e9fece6495b8dfa90e48e29868fc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE