Behavioral task
behavioral1
Sample
6010298ac1bcde8f6fb46ce2b3d26fbe64467a9d7dbb39c4be4288bb5253a60a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6010298ac1bcde8f6fb46ce2b3d26fbe64467a9d7dbb39c4be4288bb5253a60a.exe
Resource
win10v2004-20230915-en
General
-
Target
6010298ac1bcde8f6fb46ce2b3d26fbe64467a9d7dbb39c4be4288bb5253a60a
-
Size
33KB
-
MD5
52016bbaae5bf8cefcc63f3099a002c7
-
SHA1
dd9526eb06c373cb5cf4fb2766dfa5151f142971
-
SHA256
6010298ac1bcde8f6fb46ce2b3d26fbe64467a9d7dbb39c4be4288bb5253a60a
-
SHA512
149991aca8322052a81ab1da18e0e1b1122848a5084ba565a63b94a566f1c29f0ab2d1a62bf53c65cf59e7efa827c158c542f485d6e29570b733bc65fa8d0d9a
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6010298ac1bcde8f6fb46ce2b3d26fbe64467a9d7dbb39c4be4288bb5253a60a
Files
-
6010298ac1bcde8f6fb46ce2b3d26fbe64467a9d7dbb39c4be4288bb5253a60a.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE