Behavioral task
behavioral1
Sample
1236-63-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1236-63-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
1236-63-0x0000000000400000-0x0000000000409000-memory.dmp
-
Size
36KB
-
MD5
9548b7fba294de978751d0101c31c739
-
SHA1
160cd3ed79b8f28a6a6c218fe19961a7ca47aed2
-
SHA256
0233a657ce18c43dcd37a606812079bd08cb56a900343c8f8747cac197b758a5
-
SHA512
6f5a4ee721ccb285c668607d3d6aca9bc73c827c8a11f78cfc9006074886e6dc84811f1ed33010a63b972758d5ca2c29e32c9de97ba93fd81e807bd0d8e933d7
-
SSDEEP
768:8t6+ztmVfbHmHS8/ckpKd75wiqjUKPO6AAb3vM8pYwA:2ztmJbHmHT/zKdVwigUAAK3qw
Malware Config
Extracted
smokeloader
swo
Signatures
-
Smokeloader family
Files
-
1236-63-0x0000000000400000-0x0000000000409000-memory.dmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE