Behavioral task
behavioral1
Sample
90ccd84f28e4dd03fb70b8739c4636acbcf8a030404b5a24264afd1acd09ecbc.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
90ccd84f28e4dd03fb70b8739c4636acbcf8a030404b5a24264afd1acd09ecbc.exe
Resource
win10v2004-20230621-en
General
-
Target
35a15fad3767597b01a20d75c3c6889a.bin
-
Size
27KB
-
MD5
3a301bda47cbb4a16c49a716237dab4e
-
SHA1
0a204a478f85b402cd1d444ff476ab6f1c222707
-
SHA256
3823f843d1cd7f15142c9a18ae5f17ee9ed81c9753a55ca4138bc7f3883e1e53
-
SHA512
9031553c9c10a67991b701862206b378728a0d7e8424b05810bc3afd0e2042ca967b25d88abd7f68aa14fc4c2a5e3d8344c791a27d7d1f812810c25edb68fd5f
-
SSDEEP
768:iuPEz6GA7T7NTzuZWD0YqWhpOyt2LYpij69:iu8K7Ppyeh7V8j69
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/90ccd84f28e4dd03fb70b8739c4636acbcf8a030404b5a24264afd1acd09ecbc.exe
Files
-
35a15fad3767597b01a20d75c3c6889a.bin.zip
Password: infected
-
90ccd84f28e4dd03fb70b8739c4636acbcf8a030404b5a24264afd1acd09ecbc.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE