Behavioral task
behavioral1
Sample
2b247fb635a7f53899abf0927aa429bd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2b247fb635a7f53899abf0927aa429bd.exe
Resource
win10v2004-20230703-en
General
-
Target
2b247fb635a7f53899abf0927aa429bd.exe
-
Size
36KB
-
MD5
2b247fb635a7f53899abf0927aa429bd
-
SHA1
ffc45950b315d9ee3619e5d4c9db3091cbdb334a
-
SHA256
bfb7fedc99c269166c384b89cf2f13d007448b450dc6525e1a0f891b574648e2
-
SHA512
308f14ce508b6084b04356fedf1225fe20ca30577939ecaae52335732c49410a821ffd7ec82171ccbe13fe603aae116573664a2f82f5302fee0625737da5c85c
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b247fb635a7f53899abf0927aa429bd.exe
Files
-
2b247fb635a7f53899abf0927aa429bd.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE