Behavioral task
behavioral1
Sample
2fcc46e4b141918a70dd0c95ea77c5dc7dfff06ccfb2a829403020bbcba3ecf4.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2fcc46e4b141918a70dd0c95ea77c5dc7dfff06ccfb2a829403020bbcba3ecf4.exe
Resource
win10v2004-20230703-en
General
-
Target
35b129dd353102385bff015c89e176db.bin
-
Size
27KB
-
MD5
5acac1a62effea971be66560bfeac564
-
SHA1
b0abdc154e69fb8dd6c44358ce605e4b09cf2e0a
-
SHA256
25a2136f51f4510e19f117fa73d1c913060f1c18237368e8ecf5e283ed86644a
-
SHA512
37fa2abc1a586e2347900f9a78694a538a3e29b80f7ceb2b6819a629a6a29063f813bee55578c6eb1f66818ee8faed37b551b16d62ce67ab8df09f6f384ceda5
-
SSDEEP
384:kpXhscBVqjve69+1ErcnnTpckt+tzL17XTqNKvI84G/35nwRgD9OHym7KJLuqYLY:4hsci7e6g1s6N+pLhsKvTP/DlRTj8oCC
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2fcc46e4b141918a70dd0c95ea77c5dc7dfff06ccfb2a829403020bbcba3ecf4.exe
Files
-
35b129dd353102385bff015c89e176db.bin.zip
Password: infected
-
2fcc46e4b141918a70dd0c95ea77c5dc7dfff06ccfb2a829403020bbcba3ecf4.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE