Behavioral task
behavioral1
Sample
c5e2cbdc805ea8398a97a18d9e057aa211399dab8bc86764901e340f1204905e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c5e2cbdc805ea8398a97a18d9e057aa211399dab8bc86764901e340f1204905e.exe
Resource
win10v2004-20230915-en
General
-
Target
c5e2cbdc805ea8398a97a18d9e057aa211399dab8bc86764901e340f1204905e
-
Size
46KB
-
MD5
0d61200ca0424882f4e9a80a72f40447
-
SHA1
43c8a5446cbfe2e40b7b567b129c82aa614972ab
-
SHA256
c5e2cbdc805ea8398a97a18d9e057aa211399dab8bc86764901e340f1204905e
-
SHA512
219ff712a790f95cea3bd9fb02eb8e4bc44e78a8756563a12d1b87027ab99b678cca8e8f7cf4915caf7231edb27c4b2ab9c6dc264cb53d0106205e6deb20fa29
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5e2cbdc805ea8398a97a18d9e057aa211399dab8bc86764901e340f1204905e
Files
-
c5e2cbdc805ea8398a97a18d9e057aa211399dab8bc86764901e340f1204905e.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE