Behavioral task
behavioral1
Sample
6e0d5486bbb74259d577fb0a9e6613d520d8da5531b7235401fb4adab3b238abexe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6e0d5486bbb74259d577fb0a9e6613d520d8da5531b7235401fb4adab3b238abexe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
6e0d5486bbb74259d577fb0a9e6613d520d8da5531b7235401fb4adab3b238abexe_JC.exe
-
Size
36KB
-
MD5
5fa3557102d4401a68eaf267dc293160
-
SHA1
8592aa9a803b3d8b68a71ede5e1fdf518754c859
-
SHA256
6e0d5486bbb74259d577fb0a9e6613d520d8da5531b7235401fb4adab3b238ab
-
SHA512
d3ec8431c3fa7f14d5c06d9b48c642cad6b41d61f532a701228c054cca858a7a0e8161f259e81e1267b69e261869c3bd200aa9fcf28c6176b4abe3c2aec30fe2
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e0d5486bbb74259d577fb0a9e6613d520d8da5531b7235401fb4adab3b238abexe_JC.exe
Files
-
6e0d5486bbb74259d577fb0a9e6613d520d8da5531b7235401fb4adab3b238abexe_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE