Behavioral task
behavioral1
Sample
2708-113-0x0000000000020000-0x0000000000029000-memory.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2708-113-0x0000000000020000-0x0000000000029000-memory.exe
Resource
win10v2004-20230703-en
General
-
Target
2708-113-0x0000000000020000-0x0000000000029000-memory.dmp
-
Size
36KB
-
MD5
00f2d8a203709b19ecc45f9bbecfb2d0
-
SHA1
670ff5f8530b0e5930421882f396f352639591bd
-
SHA256
ee12f2bb464d0c2dea8a37701c13450662a91056f5383ce29bf44c0ed5398d7f
-
SHA512
e8cf270b1fc9baec5f03ba01928173e3209d691423485e34a863da865cfadc73dd16a85b493be8535ba625595ea6b91f5628e2352f3dd96a35f4d80720ed74dc
-
SSDEEP
768:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW7xdXxH:k6H+qUv8zrvOXf9Je42dxH
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2708-113-0x0000000000020000-0x0000000000029000-memory.dmp
Files
-
2708-113-0x0000000000020000-0x0000000000029000-memory.dmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE