Behavioral task
behavioral1
Sample
0x0007000000016043-102.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x0007000000016043-102.exe
Resource
win10v2004-20230703-en
General
-
Target
0x0007000000016043-102.dat
-
Size
32KB
-
MD5
36604361f2e775b4a37c022b503fe7cd
-
SHA1
c53b49e54b6fde5eabf895cd131ba16888047a35
-
SHA256
b769e6a1c4914ef4a01300f58e58f3d2ca8a42466ba119a64fc5d821d04379d6
-
SHA512
b335a72e633e9668c2b026f10864344e313855c5514096aa54697b53712e4effaf2945115d874f04241a15941732c412e034ca265e71f35a99a50d7c4ab89b3b
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0007000000016043-102.dat
Files
-
0x0007000000016043-102.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE