Behavioral task
behavioral1
Sample
stage1_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
stage1_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
stage1_JC.bin
-
Size
32KB
-
MD5
20820ab76de6778f967ea1febcde60ae
-
SHA1
2fb47ebb2a5e986fc12ad3f3fb3f4ee184641fa1
-
SHA256
3c3f88396262f02633e1ec2b67cde0461b4c0f9c7d7b88bd985953747c3802fc
-
SHA512
7e8f034642564aff7dffc4d63adbe04da09de9dc29ed03636a9dd8beaf33310d2c1acc6837eb99bd63148bcd507c3d2dc76777ca300ab4d267dfd75577df593f
-
SSDEEP
768:Nf2z5wdkk846MlpaOucO4h9tnB95Cc6NirsQMFXDTRaU:NAIkk84Hp/vl6XXDk
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource stage1_JC.bin
Files
-
stage1_JC.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE