Behavioral task
behavioral1
Sample
13ff42fbd37ef7f1c7f75b7ee1f334e9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
13ff42fbd37ef7f1c7f75b7ee1f334e9.exe
Resource
win10v2004-20230703-en
General
-
Target
13ff42fbd37ef7f1c7f75b7ee1f334e9.exe
-
Size
39KB
-
MD5
13ff42fbd37ef7f1c7f75b7ee1f334e9
-
SHA1
415aa0a8b0bf8ac566799ea339457c967424f124
-
SHA256
108bb90a0f8789575433d2413e6f92cc46459ec1d81695b9ff244ee74361053a
-
SHA512
49cfc996e350f642c13df2cb935091bf38a85f777cd64ff7b9aa35b241f844a72748095f908693ff6cbade682e2d7b9f7c57d108db6b4b2c55599283fc7c589b
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13ff42fbd37ef7f1c7f75b7ee1f334e9.exe
Files
-
13ff42fbd37ef7f1c7f75b7ee1f334e9.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE