Behavioral task
behavioral1
Sample
2348-0-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2348-0-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win10v2004-20230915-en
General
-
Target
2348-0-0x0000000000400000-0x0000000000409000-memory.dmp
-
Size
36KB
-
MD5
6ba4234900d993c24b58a601718c4b38
-
SHA1
184180ab94fc2a71c2a392ac55184dbbb1171667
-
SHA256
e53c34edfb361c7430f9d8500f7bb08059ca1cd6b899edba2ecf7f9e7629a370
-
SHA512
94a20f3adcdbc21c1a75b10905483a7c9047188386a4ed3da1c6db6a17507a053fd372fd5c4cfa4c13d818e88b17430d8c21ff9b0b6e5064d5c071211a3ae3a4
-
SSDEEP
768:OkUqYDNIIoKpDd1KM02kQhx4hOtFceWzYqvz:zLimLKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2348-0-0x0000000000400000-0x0000000000409000-memory.dmp
Files
-
2348-0-0x0000000000400000-0x0000000000409000-memory.dmp.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE