Behavioral task
behavioral1
Sample
2360-519-0x0000019E7C210000-0x0000019E7C220000-memory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2360-519-0x0000019E7C210000-0x0000019E7C220000-memory.exe
Resource
win10v2004-20230915-en
General
-
Target
2360-519-0x0000019E7C210000-0x0000019E7C220000-memory.dmp
-
Size
64KB
-
MD5
b2bcf5908d414782da2906466a577529
-
SHA1
4eb3a3dbc25269ea6a7e8e59293d6073d7806c57
-
SHA256
747d19b8a761707173d77b08cc051ccdd4daf19d2a6277c2e39afd952e0dc2cd
-
SHA512
9f1f8b58265692803381aa56989906180e5d8543d01dd1a0e572029dd8b4ac066aa26e33a8bf9b2ea43a5a789619a18880039bae7282204ad646b538288905bd
-
SSDEEP
768:OkUqYDNiIoKpDd1KM02kQhx4hOtFceWzYqvz0bOS0h8CFOj5a1u5CP1rDRoC2:zLicLKtd1PBkQD4UtFceWnzJhAa1qKk
Malware Config
Extracted
smokeloader
eges
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2360-519-0x0000019E7C210000-0x0000019E7C220000-memory.dmp
Files
-
2360-519-0x0000019E7C210000-0x0000019E7C220000-memory.dmp.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE