Behavioral task
behavioral1
Sample
2c5640ec5b28ece97d73a22374116fa607b2094bb1ffe97ec1cc71c21f20c178_sc_dump.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2c5640ec5b28ece97d73a22374116fa607b2094bb1ffe97ec1cc71c21f20c178_sc_dump.exe
Resource
win10v2004-20230915-en
General
-
Target
2c5640ec5b28ece97d73a22374116fa607b2094bb1ffe97ec1cc71c21f20c178_sc_dump.exe
-
Size
30KB
-
MD5
21d319b4fcc6689e9e93508e272637e8
-
SHA1
89dba08518846d15d7cd1d062c6fa37d5e7c6101
-
SHA256
c10bb12607855be812725b041507d5a423f25895017338415f5fc0428aabfcea
-
SHA512
b3b74d127b558a4673d892baa653ff06c7e78d62874a80e2a06b3263fdf1528ca8b3a6e510ee4f0e8bb9bbe063e67c0d3ccf53fdd1b7f633566dffc8fe1be1e7
-
SSDEEP
768:OAUqYpNSIoKpDd1KM02kQhx4hOtFceWzYqvz0bOS:HLo8LKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c5640ec5b28ece97d73a22374116fa607b2094bb1ffe97ec1cc71c21f20c178_sc_dump.exe
Files
-
2c5640ec5b28ece97d73a22374116fa607b2094bb1ffe97ec1cc71c21f20c178_sc_dump.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE