Behavioral task
behavioral1
Sample
1bceb1eaa4211ed8b85e9bc68e8191dd3523cfd87b488926b19f3c06b94a8c55_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1bceb1eaa4211ed8b85e9bc68e8191dd3523cfd87b488926b19f3c06b94a8c55_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
1bceb1eaa4211ed8b85e9bc68e8191dd3523cfd87b488926b19f3c06b94a8c55_JC.exe
-
Size
39KB
-
MD5
031915542a4d3f8d524d6f2b5cd9de5c
-
SHA1
346626e60e7f2024fa9c83af6ee21d9f4271aeee
-
SHA256
1bceb1eaa4211ed8b85e9bc68e8191dd3523cfd87b488926b19f3c06b94a8c55
-
SHA512
71be7f84e9cdf73a55a67e6057d5e9be0db68a53a8c3e1b02e81c8a975b3517f61d86f72bb126cd96d60453ec191fa64fc7dc74bdf73abf987d7ed3139d30d00
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bceb1eaa4211ed8b85e9bc68e8191dd3523cfd87b488926b19f3c06b94a8c55_JC.exe
Files
-
1bceb1eaa4211ed8b85e9bc68e8191dd3523cfd87b488926b19f3c06b94a8c55_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE