Behavioral task
behavioral1
Sample
099f412d403191db0a716eaa043a9451ab07ca170d57aa17a041c6c1e57cef7d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
099f412d403191db0a716eaa043a9451ab07ca170d57aa17a041c6c1e57cef7d.exe
Resource
win10v2004-20230703-en
General
-
Target
077877515cd1d61c2858b2df1b33ba46.bin
-
Size
27KB
-
MD5
e7c49e6e7eb12e7387ac176d4de43348
-
SHA1
3bda328197e25a2d6bac0c1c58a87fd1474ff823
-
SHA256
0035b034fd63c49ac28b3ddedd73e9d897032fbf88e3e0d3fe751350ab47a499
-
SHA512
4cb01071f2adc42215b1609b8037cf7d8041fae6043dd534013d13a2215c7b4dc6b04524e97378124ba23b7d23f80793c7cbecbac184408396fe79c429caa255
-
SSDEEP
768:NW109OfjjWWItWgX5FTvEDkWiw5KF4OvbDCreC:NWXOhUK5EX5KFHbfC
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/099f412d403191db0a716eaa043a9451ab07ca170d57aa17a041c6c1e57cef7d.exe
Files
-
077877515cd1d61c2858b2df1b33ba46.bin.zip
Password: infected
-
099f412d403191db0a716eaa043a9451ab07ca170d57aa17a041c6c1e57cef7d.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE