Behavioral task
behavioral1
Sample
6e0d5486bbb74259d577fb0a9e6613d520d8da5531b7235401fb4adab3b238ab.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6e0d5486bbb74259d577fb0a9e6613d520d8da5531b7235401fb4adab3b238ab.exe
Resource
win10v2004-20230703-en
General
-
Target
5fa3557102d4401a68eaf267dc293160.bin
-
Size
27KB
-
MD5
f8e678a88386ab2d3ba08ddb9938a7d1
-
SHA1
9127d72bc43c17b2986311e4e0237b10d0bcdc21
-
SHA256
64c27f46064327b06f73cd002ed0ebfd05e4dbeb7d44eb88fdeefc4d88cb3ca5
-
SHA512
83d1586d17805639d31f40f665cb6171fb72d645eb34f7b1cb78b1b300db94495760732dfb2e6cdb936226eb3bb6326c74e6c13625d9aeb6afd82be9d104f09e
-
SSDEEP
768:3qwpR5EfjtIS0K/KM4FkzwtBBfwAKG60geOBKE:6ER5ApIS9AkzwXB40gea
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6e0d5486bbb74259d577fb0a9e6613d520d8da5531b7235401fb4adab3b238ab.exe
Files
-
5fa3557102d4401a68eaf267dc293160.bin.zip
Password: infected
-
6e0d5486bbb74259d577fb0a9e6613d520d8da5531b7235401fb4adab3b238ab.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE