Behavioral task
behavioral1
Sample
2c071d778bb47b11fd4858af834ecca0.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2c071d778bb47b11fd4858af834ecca0.exe
Resource
win10v2004-20230703-en
General
-
Target
2c071d778bb47b11fd4858af834ecca0.exe
-
Size
31KB
-
MD5
2c071d778bb47b11fd4858af834ecca0
-
SHA1
60246bebacd35324850d3133b64ab95d4de482b8
-
SHA256
cdbdd07a270d1d907798fabe6c680b677f98f119cd93987de5b6a2db7597d5b4
-
SHA512
bb1baf1b3470fb07dd67a178c12812c42f93f206cb7226eca69402fb3a5b936cfe320a2d96d20644ef613ce835bd79426a38243d44424384e26d7620586e02ef
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c071d778bb47b11fd4858af834ecca0.exe
Files
-
2c071d778bb47b11fd4858af834ecca0.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE