Behavioral task
behavioral1
Sample
2160-134-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2160-134-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
2160-134-0x0000000000400000-0x0000000000409000-memory.dmp
-
Size
36KB
-
MD5
caca821318afad6000c4c7bba39c098c
-
SHA1
c08f3331ee64d41b961e85fc944290fa2885c1f4
-
SHA256
bcea0af5d4b64d2b2248bf30b97a1284a43a33d85daf97a06b78a60f617d5394
-
SHA512
51aeeb7f3b3df69a81955ed25db05d9a319e5c904d40bd7d56fe3ce868ef58e8b5bf0d390ec6b5171b85e48fbeeb8ec1ab741b2a35f1ba027bb5564d0b379936
-
SSDEEP
768:OAUqYpNSIoKpDd1KM02kQhx4hOtFceWzYqvz0bOS:HLo8LKtd1PBkQD4UtFceWnz
Malware Config
Extracted
smokeloader
lab
Signatures
-
Smokeloader family
Files
-
2160-134-0x0000000000400000-0x0000000000409000-memory.dmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE