Behavioral task
behavioral1
Sample
0284f96644d60bf327810b35dc69c753d503fff4df824047928d07e6926499d0.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0284f96644d60bf327810b35dc69c753d503fff4df824047928d07e6926499d0.exe
Resource
win10v2004-20230703-en
General
-
Target
045abca1540fa094aea747b85563bf74.bin
-
Size
27KB
-
MD5
cded15858610fb789d3c0b2ad0879061
-
SHA1
cc9adf39dc6b18dab1ce5dfed5eeb7e16eb21f75
-
SHA256
f65001f3b6b9cfbd50adfa0f9582ccc75fd3b1cbdfb67ebf4135bc6a16fb5461
-
SHA512
3e7cbf3e6e00fed81fa223d50d73a3f1396ae35cfd5c4e280b7bdde66e87a7bdfefa5806f87e16ad8f5333cff7008b1c7b96d0ab662b801fdcfb87237f29307b
-
SSDEEP
768:4/N5VlIutCzyBkIgtjOtAG7A0Fldnn8Cp6oYXhH24gHP1lfG:oDPCzMkI6OlA0HhnLpqhsP+
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0284f96644d60bf327810b35dc69c753d503fff4df824047928d07e6926499d0.exe
Files
-
045abca1540fa094aea747b85563bf74.bin.zip
Password: infected
-
0284f96644d60bf327810b35dc69c753d503fff4df824047928d07e6926499d0.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE