Behavioral task
behavioral1
Sample
0x00050000000195a1-112.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x00050000000195a1-112.exe
Resource
win10v2004-20230703-en
General
-
Target
0x00050000000195a1-112.dat
-
Size
40KB
-
MD5
0b5b0a50b726c9ab0bd13ba380e0cb3f
-
SHA1
4270242f150dc860e04dbbfad446c63be1dcbae0
-
SHA256
362877d681b52a854e56739362b9cb39853d9d147c24b13261d95bac360ed808
-
SHA512
efbb1f6eb14d4561973708558226d21cb154fdce50997ae2fb762737cee6b6c49309f7dade01a23fa7c32906f3c41130ad849c18d5bb156f127e63bee7b86657
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x00050000000195a1-112.dat
Files
-
0x00050000000195a1-112.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE