Behavioral task
behavioral1
Sample
0x0008000000015c56-122.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x0008000000015c56-122.exe
Resource
win10v2004-20230703-en
General
-
Target
0x0008000000015c56-122.dat
-
Size
41KB
-
MD5
c11a9978dd67eeba07321bc13fa361b3
-
SHA1
37e7903b8970a28ac972e623e6a24f78ab977e6e
-
SHA256
ff3cddfed5b87a7f547587a4764ad6d5d31e754a15f2086a322d320061c4cb86
-
SHA512
01154d688ad3d855cefe2f22bf5b7856e48b0e80239478654cca835a6902290cb9377b736a33cccd0b1dc022c228e5628d40208ca3de8c30e82a3b79ac50756b
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0008000000015c56-122.dat
Files
-
0x0008000000015c56-122.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE