Behavioral task
behavioral1
Sample
203a58b3588f03fc81df86e1b47bd4a4.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
203a58b3588f03fc81df86e1b47bd4a4.exe
Resource
win10v2004-20230703-en
General
-
Target
203a58b3588f03fc81df86e1b47bd4a4.exe
-
Size
39KB
-
MD5
203a58b3588f03fc81df86e1b47bd4a4
-
SHA1
afadd74bc91beaa7cd9017f6d7cde2d8d6456eca
-
SHA256
b6944a137673bac78da5afc3ebcf5b06198990a6451833c15ebce3fc94a316e0
-
SHA512
c82aca82df7384994d86fccb4fbd9585ecbe088ed0c21fb7e71925ba9687764d5e660f81f08370acc14abd3b530f3f0a06f2ad74d9bfa1d27d0695059902e000
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 203a58b3588f03fc81df86e1b47bd4a4.exe
Files
-
203a58b3588f03fc81df86e1b47bd4a4.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE