Behavioral task
behavioral1
Sample
52229a6c33f431ba6d441f763568a001.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
52229a6c33f431ba6d441f763568a001.exe
Resource
win10v2004-20230915-en
General
-
Target
52229a6c33f431ba6d441f763568a001.bin
-
Size
36KB
-
MD5
52229a6c33f431ba6d441f763568a001
-
SHA1
4ddecb8302fdd8918f2e1434cb1b92507bf5d1c8
-
SHA256
b707b771b5513a6190125ebffe431ec97ba5fdc0fbeb3390553b687982a035e4
-
SHA512
6750f1fbc79fb13fb2a474b0a5e6a9ffd6111bd90801679b6466b59587b0ee97e976db05ae6d4f8240c8f7b9ea5a9e692e5f210a5d0537fc77da1186e1410e03
-
SSDEEP
768:OkUqYDNMIoKpDd1KM02kQhx4hOtFceWzYqvz:zLiSLKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52229a6c33f431ba6d441f763568a001.bin
Files
-
52229a6c33f431ba6d441f763568a001.bin.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE