Behavioral task
behavioral1
Sample
f71ba6ef6713844c6bbed2261441cd29b215e51515bba45338a2909a1233264dexe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f71ba6ef6713844c6bbed2261441cd29b215e51515bba45338a2909a1233264dexe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
f71ba6ef6713844c6bbed2261441cd29b215e51515bba45338a2909a1233264dexe_JC.exe
-
Size
39KB
-
MD5
1b1811559dccc6eae456084dbcabd71b
-
SHA1
fa9ec2b7427edd18ed7083e968af2705b618b5bc
-
SHA256
f71ba6ef6713844c6bbed2261441cd29b215e51515bba45338a2909a1233264d
-
SHA512
222994bf291142657a49d326ac5e6e86396533c68be8f233c31ced0e1fa555e56ffce8748f8ec957ae3ef1fba57ac255edecca08745ede61be3f1fd2500fd006
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f71ba6ef6713844c6bbed2261441cd29b215e51515bba45338a2909a1233264dexe_JC.exe
Files
-
f71ba6ef6713844c6bbed2261441cd29b215e51515bba45338a2909a1233264dexe_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE