Behavioral task
behavioral1
Sample
d3fe939abc37519cf9968874270d356abd8b10887ce7e78a5fb1624d288f14b8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d3fe939abc37519cf9968874270d356abd8b10887ce7e78a5fb1624d288f14b8.exe
Resource
win10v2004-20230915-en
General
-
Target
d3fe939abc37519cf9968874270d356abd8b10887ce7e78a5fb1624d288f14b8
-
Size
32KB
-
MD5
42ab13a5f832f542d18083839671b340
-
SHA1
891e8820dd0e4d1b9d47bc34ed92538f5081bca2
-
SHA256
d3fe939abc37519cf9968874270d356abd8b10887ce7e78a5fb1624d288f14b8
-
SHA512
f367782e62ecf6d93d7cce5a6bdf98d50ecca91ff22069c8680c11b1416c4249f22719209ad79715021cc45dfcf4fa455012a1f6d4f8755283d73da4395cd1e3
-
SSDEEP
384:iUOmU60f/d3qUxoENQ2jUoa7S8RekDH3KwUXbvH/D04IuXtGHU2IFNPOn4Q8hRhL:0mf0Xd6hul4OWHa7bD3g02yRlQE3ul
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3fe939abc37519cf9968874270d356abd8b10887ce7e78a5fb1624d288f14b8
Files
-
d3fe939abc37519cf9968874270d356abd8b10887ce7e78a5fb1624d288f14b8.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE