Overview

overview

10

Static

static

10

fake_pe_wi...de.exe

windows7-x64

3

fake_pe_wi...de.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    fake_pe_with_shellcode

  • Size

    1.9MB

  • MD5

    4727c2d2ab272af5fa728ed0154d783c

  • SHA1

    d9524b8fc29b68a942c88feff1674d54c4214a32

  • SHA256

    1b7636f82b64d7692edfa051db3c4ae88900188fb57c1685f467e6eab06b6374

  • SHA512

    027887d8937c819e69ce1973560dbb5de31cf824ff5d7205035dea47e16dfb43efd464be298218689bfdba8a5b848f420584c916ac860e9d60a5650933738946

  • SSDEEP

    24576:RQvvS3pUjWGLBOTtB6kQqBmIv4cvu32MyT5Wua16VXy09Q2MP9c:RQvv9WGLBy+lIvbu32MyToutyoQ1c

Score
10/10
smokeloader

Malware Config

Extracted

Family

smokeloader

Version

2022

rc4.i32
rc4.i32

Signatures

  • Smokeloader family
    smokeloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fake_pe_with_shellcode
    .exe windows x86

    7bacf09401a48d4044c9fd6da22d7c17


    Headers

    Imports

    Sections