Behavioral task
behavioral1
Sample
0x0009000000015d42-97.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x0009000000015d42-97.exe
Resource
win10v2004-20230703-en
General
-
Target
0x0009000000015d42-97.dat
-
Size
39KB
-
MD5
e41443e53b732a6b76ac60df7efbe0fc
-
SHA1
278b7cb9a4494ba66bc1dc83b3120548f8aaaa24
-
SHA256
4a3960d1c8006d64d77700dc85b921eef6eb6c98c19045dcd6ce1bb849481b7f
-
SHA512
f082f5a189804cde408d784b6fe32af9749c0a1d8d64911e5d4a2d5749f7df6ebcc004c8ed4e06e289af3bdada24abc48d15a837b52137c6b48714cb5012c2d5
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0009000000015d42-97.dat
Files
-
0x0009000000015d42-97.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE