Behavioral task
behavioral1
Sample
0x000a000000016c3b-101.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x000a000000016c3b-101.exe
Resource
win10v2004-20230703-en
General
-
Target
0x000a000000016c3b-101.dat
-
Size
32KB
-
MD5
cd49ad0b2c59e6a3ac3cd895a2a7c0fa
-
SHA1
00b5efc5c90787dddbf67ef17835f2611c52b84d
-
SHA256
71504a4753313b2bd5cacaf3ee6d3b735c3fefaa0e07b6012ab51bb0c9a82638
-
SHA512
126a1fdc8d622152278f6bcea36f468c2a0dae677dcb509efc901637b8e69f5a1507ae732fb1fc484308b23d67ebc94d6d8c3ce013d3c646fc93258283381ba4
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x000a000000016c3b-101.dat
Files
-
0x000a000000016c3b-101.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE