Behavioral task
behavioral1
Sample
76abd3c5b4b24b7386647d081b0b393986455795d1641dc49b18bec2f12df326exe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
76abd3c5b4b24b7386647d081b0b393986455795d1641dc49b18bec2f12df326exe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
76abd3c5b4b24b7386647d081b0b393986455795d1641dc49b18bec2f12df326exe_JC.exe
-
Size
36KB
-
MD5
32528036d53be119e13793b7881efdfe
-
SHA1
e82ab1496dfeef0a48e50f7e01689fc4daa64525
-
SHA256
76abd3c5b4b24b7386647d081b0b393986455795d1641dc49b18bec2f12df326
-
SHA512
cdc304071f5b29f188d53154dd4abaf3250b15c0153ad3c84bfcbfddb50bbcee052c5608cb74f4eea584312677984968979b58371dfadf0307da4cb4a655997f
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76abd3c5b4b24b7386647d081b0b393986455795d1641dc49b18bec2f12df326exe_JC.exe
Files
-
76abd3c5b4b24b7386647d081b0b393986455795d1641dc49b18bec2f12df326exe_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE