Behavioral task
behavioral1
Sample
0x000a000000016d6b-102.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x000a000000016d6b-102.exe
Resource
win10v2004-20230703-en
General
-
Target
0x000a000000016d6b-102.dat
-
Size
32KB
-
MD5
727b6b4e28c2fd0161e905b6dd5b639a
-
SHA1
548bd23eb203e6367b2500fff336117a4f669b00
-
SHA256
6e61ec74bc18a709c6e168941eee7383dcbbb7b3314f75f7622ad7638c3ceb8b
-
SHA512
02a8e99bf89c53adafa70df24cfd4d980b30a2caaad3f8b3a8ff7bfd633158d901e70bff692a0a66156eb59a62fbc3f7336bbeff129d0a06c21ebaa56e735437
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x000a000000016d6b-102.dat
Files
-
0x000a000000016d6b-102.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE