Behavioral task
behavioral1
Sample
5385f6fea25b0441d5820065e10174f2a719a4dfb310d1f3d26144f0767b6ab5_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5385f6fea25b0441d5820065e10174f2a719a4dfb310d1f3d26144f0767b6ab5_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
5385f6fea25b0441d5820065e10174f2a719a4dfb310d1f3d26144f0767b6ab5_JC.exe
-
Size
39KB
-
MD5
4e75b88370ad68c915c9c7791e7f14e5
-
SHA1
414032b0d7336da7b02925102cd4e74ae4fcf5c3
-
SHA256
5385f6fea25b0441d5820065e10174f2a719a4dfb310d1f3d26144f0767b6ab5
-
SHA512
331e9e5810038519ab7c2d34ab6ad6f2e56c688d356fe37ea003c2a8ca6e10d20008ed3fda5b2d93a3520a54747d8183e80934ea82b359936a8a6667d52a85f1
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5385f6fea25b0441d5820065e10174f2a719a4dfb310d1f3d26144f0767b6ab5_JC.exe
Files
-
5385f6fea25b0441d5820065e10174f2a719a4dfb310d1f3d26144f0767b6ab5_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE