Behavioral task
behavioral1
Sample
79cf52a82d606b701ede22b7705dea12.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
79cf52a82d606b701ede22b7705dea12.exe
Resource
win10v2004-20230703-en
General
-
Target
79cf52a82d606b701ede22b7705dea12.exe
-
Size
30KB
-
MD5
79cf52a82d606b701ede22b7705dea12
-
SHA1
5a95a6e7962a61f350b944c0bc2e43169885d022
-
SHA256
0e2ca3a86d3a4b2db09378a17aa65d667bafe6227b30f1a4ba9079a439d06841
-
SHA512
d3dbf0969f09bc69dd620b360c63b8c2a208182720cbfe815aebaabe18a04cb5f688dca7a149b0af315664a73f02d98fa37faec35d68e47458eeb1aa9ff3d08b
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79cf52a82d606b701ede22b7705dea12.exe
Files
-
79cf52a82d606b701ede22b7705dea12.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE