Behavioral task
behavioral1
Sample
0x0009000000018fb3-94.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x0009000000018fb3-94.exe
Resource
win10v2004-20230703-en
General
-
Target
0x0009000000018fb3-94.dat
-
Size
39KB
-
MD5
6b4753de9a02e3c07816d513be54c781
-
SHA1
7c5d518598bf7d0967c865140e07fef4950da530
-
SHA256
6d29470ef3f221ae0e907c21103a48be93f41bd1dd3cd7b6382ee1046165ef13
-
SHA512
6bb55763d61fb575d76380516504a313940c39ca78b06f6f05e2f98b232fe0726d3731dc9a92345015a0716b0e4edd077748c3128593617749405a89d381f9f9
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0009000000018fb3-94.dat
Files
-
0x0009000000018fb3-94.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE