Behavioral task
behavioral1
Sample
24e87768c3dd59e6ac83fce163d17e9f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
24e87768c3dd59e6ac83fce163d17e9f.exe
Resource
win10v2004-20230703-en
General
-
Target
24e87768c3dd59e6ac83fce163d17e9f.exe
-
Size
39KB
-
MD5
24e87768c3dd59e6ac83fce163d17e9f
-
SHA1
dfa0340c951ceca90c8194c351a7a1238ba139dd
-
SHA256
28e2a80052f6740a00fd23d3abc000f40920a43c0987fd46d16ef7fcac34924f
-
SHA512
06c09200104defcd14f9a503bdaa6c6d8853942bbe187ce202f64541d0c832091a82ee40caaf1aebb1af8e4076e71850ae3fc7b463ac4057557c6acd1bb1b41a
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24e87768c3dd59e6ac83fce163d17e9f.exe
Files
-
24e87768c3dd59e6ac83fce163d17e9f.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE