Behavioral task
behavioral1
Sample
0x0009000000016c3b-112.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x0009000000016c3b-112.exe
Resource
win10v2004-20230703-en
General
-
Target
0x0009000000016c3b-112.dat
-
Size
41KB
-
MD5
79eb147fe8f5c135e01fc79cd40f2a7b
-
SHA1
17cfbec9e4be3aa4f3cae0698df8702d4aec0343
-
SHA256
ac47a6423dfe2456228b26963d2cba63543b173692ebe72191e542ad0cae220a
-
SHA512
d4bda6d6c4e7ff023a62f3c476f663a5dd5b4afab145dd3f41fa7f005b772b7d0d18d1d2fb1f0caa9e03846d6d46b53387c622d18480615ef38c081beebb3743
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0009000000016c3b-112.dat
Files
-
0x0009000000016c3b-112.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE