Behavioral task
behavioral1
Sample
68b4f651aad2e7b8c8079d8ab40a5770dbf9ccb0d6f20d1e77693995b61147cd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
68b4f651aad2e7b8c8079d8ab40a5770dbf9ccb0d6f20d1e77693995b61147cd.exe
Resource
win10v2004-20230915-en
General
-
Target
68b4f651aad2e7b8c8079d8ab40a5770dbf9ccb0d6f20d1e77693995b61147cd
-
Size
42KB
-
MD5
11f07382f77e02d27957d8b05175e632
-
SHA1
2c190a32e704bba434e1ee9b4892d966ea4f45b0
-
SHA256
68b4f651aad2e7b8c8079d8ab40a5770dbf9ccb0d6f20d1e77693995b61147cd
-
SHA512
30b72f755b7f6d53acfb2ebf8f0721b253f03cce3a103c9f828b1d9b943b53a74b6ec33f119fdd99ce501f1141f3cae39862d9027d32b83d89bdb6494720aa85
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68b4f651aad2e7b8c8079d8ab40a5770dbf9ccb0d6f20d1e77693995b61147cd
Files
-
68b4f651aad2e7b8c8079d8ab40a5770dbf9ccb0d6f20d1e77693995b61147cd.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE