Behavioral task
behavioral1
Sample
9ef9557d48bb2e2e564481e6ce857f0525de3bd1157534bb8064e2eaa788c5b1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9ef9557d48bb2e2e564481e6ce857f0525de3bd1157534bb8064e2eaa788c5b1.exe
Resource
win10v2004-20230703-en
General
-
Target
9ef9557d48bb2e2e564481e6ce857f0525de3bd1157534bb8064e2eaa788c5b1
-
Size
37KB
-
MD5
d540fc0858922ee3826b33eef26a42e6
-
SHA1
4fe41d7744c5c7a378915cc7baa4362f8e09fecf
-
SHA256
9ef9557d48bb2e2e564481e6ce857f0525de3bd1157534bb8064e2eaa788c5b1
-
SHA512
c9adbbd1d66791454971e04eb48e2202a213381087e7f11eba5c229cad0d24652d02dfea4a5f6264c2c580abe86dd2b77a1f0cfa789dfa2944fa8ebd0febd4ab
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ef9557d48bb2e2e564481e6ce857f0525de3bd1157534bb8064e2eaa788c5b1
Files
-
9ef9557d48bb2e2e564481e6ce857f0525de3bd1157534bb8064e2eaa788c5b1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE