Behavioral task
behavioral1
Sample
yuha.exe
Resource
win10-20230703-en
5 signatures
120 seconds
General
-
Target
yuha.exe
-
Size
30KB
-
MD5
98f0c51fae13a11fa6851bd32dd450d9
-
SHA1
7f4f555598a5fa24fb79da8696ebe218f92b6561
-
SHA256
7b0e25c99ef33caed24b3102cee5b9c345c9f138246e5daa2f00d561670fb34e
-
SHA512
7db63a08d1bba2e3b7b282bf580d6dd72abe6c935b9091bac5d6bb42865b0fec85e2544131d974378bbdad2a90790edc02175a19a691c677ceb024dbdb93a46e
-
SSDEEP
768:xEFgcqoH2r4gYfECB8IyC/5EaSF3bngT7CGheZm:xId5H2rjYf1ACBEaS4VheZm
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource yuha.exe
Files
-
yuha.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE