Behavioral task
behavioral1
Sample
48f9ea2b1103e5a943a21a04886ab6bc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
48f9ea2b1103e5a943a21a04886ab6bc.exe
Resource
win10v2004-20230915-en
General
-
Target
48f9ea2b1103e5a943a21a04886ab6bc.bin
-
Size
36KB
-
MD5
48f9ea2b1103e5a943a21a04886ab6bc
-
SHA1
969604ad3873f82f25ebb43c09b8336fa87f7874
-
SHA256
69ea119f6ee4d632063fc36e7a080919987db4ccd9f76ab93a05aab08310cd66
-
SHA512
c902f478e830ca6253cc5158170587d26a4399ebb675b3d0af10e38ccdb6b0a6bd191009099401030f1ae2612b32d870b633a07a6356bceed89a5d50d2d52922
-
SSDEEP
768:OkUqYDNMIoKpDd1KM02kQhx4hOtFceWzYqvz0bOS:zLiSLKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48f9ea2b1103e5a943a21a04886ab6bc.bin
Files
-
48f9ea2b1103e5a943a21a04886ab6bc.bin.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE