Behavioral task
behavioral1
Sample
0x000500000001909a-112.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x000500000001909a-112.exe
Resource
win10v2004-20230703-en
General
-
Target
0x000500000001909a-112.dat
-
Size
41KB
-
MD5
717ddd5bb3f3b6a3286e5b1a23b1ea84
-
SHA1
18e411bc9ca34244fe5578141ced8d9818c58012
-
SHA256
4115de184eed5e137a19aa16e3407567e0c8ed65d5001855ed72b95633e67d9a
-
SHA512
b4fe559f71cdf1595b532fefc76ce2ce5a9b3eb94b7c47b89c0301592a7fca478d7611bdd1dfc8fc67dae4eeda1d40ceb6bc2dce10958ab2b6febb5a64abd538
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x000500000001909a-112.dat
Files
-
0x000500000001909a-112.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE