Behavioral task
behavioral1
Sample
0x0007000000016831-102.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x0007000000016831-102.exe
Resource
win10v2004-20230703-en
General
-
Target
0x0007000000016831-102.dat
-
Size
32KB
-
MD5
1d1125fc931a377d6f2eec3283f5f765
-
SHA1
3bc67be358c551087f0472287a2f2af361561eb2
-
SHA256
522d7273219e2038feb16be5cbf44b889f159e1b25ea360ec8c3f3753ca7add1
-
SHA512
7066b940913864162ce49a41ade1998f1a5ec658006de190d0465ffe37fc2a24593a27e8701890d2158620e0588b6ab06ecc1280b8aa7cbc11ee37f909fe33d3
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0007000000016831-102.dat
Files
-
0x0007000000016831-102.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE