Behavioral task
behavioral1
Sample
2344-53-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2344-53-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win10v2004-20230703-en
General
-
Target
2344-53-0x0000000000400000-0x0000000000409000-memory.dmp
-
Size
36KB
-
MD5
9bd0be4fbc58a9adcf4c39f58a0af396
-
SHA1
e234a688e40efb5d113ef573796e46686f9d9d0b
-
SHA256
259b83dffde4131f8bcfc7260ab1b97a1afd63408f498fd9cb3421bfeb44961b
-
SHA512
f74a457785835e6361b3e440fd1195672e20421e7f6ffd4d905f2fd1374c07e39eff5d05749f4197ddd37ccd5e1a7755d627490e03790cfbd3355f5cf266f715
-
SSDEEP
768:OkUqYDNHIoKpDd1KM02kQhx4hOtFceWzYqvz:zLihLKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2344-53-0x0000000000400000-0x0000000000409000-memory.dmp
Files
-
2344-53-0x0000000000400000-0x0000000000409000-memory.dmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE