Behavioral task
behavioral1
Sample
0x0006000000015c2d-122.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0x0006000000015c2d-122.exe
Resource
win10v2004-20230703-en
General
-
Target
0x0006000000015c2d-122.dat
-
Size
42KB
-
MD5
55eba18ae856f949bf4ecf7a8a5e93c6
-
SHA1
4c2179b069e3c02ee5065062194cf3e86233f350
-
SHA256
04127fe977e91503d151db7d539004315c788ba957a9a3e1cb69084e6de52a51
-
SHA512
42b2b8f6dd38b12659943993e77accce63ae042c5bab89596ced488195a45dd00428850f8472e2883e63cdb42672482e538a47b27a2a03bece4bef9307db6606
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000015c2d-122.dat
Files
-
0x0006000000015c2d-122.dat.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE