Behavioral task
behavioral1
Sample
2abd8a9fcc73084b95116e35e2977660.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2abd8a9fcc73084b95116e35e2977660.exe
Resource
win10v2004-20230824-en
General
-
Target
2abd8a9fcc73084b95116e35e2977660.exe
-
Size
47KB
-
MD5
2abd8a9fcc73084b95116e35e2977660
-
SHA1
465fedb62b66ce218629ef20cc2f77a8648ce209
-
SHA256
b855d6e0b92089b13a870b5023990097a439fa8c31201a304967d1cd53243af5
-
SHA512
77deae998081e677392c57cec8f434d5d0085e2b2b3d625ce1f765141db1c4144f5d4d6e7dfef77177eb4cdaec54782e991d04aae4d11ff7ca19ea3983507af9
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2abd8a9fcc73084b95116e35e2977660.exe
Files
-
2abd8a9fcc73084b95116e35e2977660.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE