Behavioral task
behavioral1
Sample
4bc811aec7d4ff2020b2ea2ab3c2bdc5033473ee2972e4b7b98f9cbc87fb8c44_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4bc811aec7d4ff2020b2ea2ab3c2bdc5033473ee2972e4b7b98f9cbc87fb8c44_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
4bc811aec7d4ff2020b2ea2ab3c2bdc5033473ee2972e4b7b98f9cbc87fb8c44_JC.exe
-
Size
39KB
-
MD5
21c09dbf8953a3bfb385ad55344b17d3
-
SHA1
4a7592598d2355cfe8935f5c58a40a33a196dd03
-
SHA256
4bc811aec7d4ff2020b2ea2ab3c2bdc5033473ee2972e4b7b98f9cbc87fb8c44
-
SHA512
25999037fc14b18f2836dd27efc509f1a5606818d51ca2f6bf01428c09027fe9a6e7cc83505a2b49ce4902dd344ae7a59216272635ebc2159aa6494b05dd53d9
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bc811aec7d4ff2020b2ea2ab3c2bdc5033473ee2972e4b7b98f9cbc87fb8c44_JC.exe
Files
-
4bc811aec7d4ff2020b2ea2ab3c2bdc5033473ee2972e4b7b98f9cbc87fb8c44_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE