Behavioral task
behavioral1
Sample
NEAS.74fd91641ba14e4c20a9bc8702ba9390.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.74fd91641ba14e4c20a9bc8702ba9390.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.74fd91641ba14e4c20a9bc8702ba9390.exe
-
Size
29KB
-
MD5
74fd91641ba14e4c20a9bc8702ba9390
-
SHA1
f7a910809b61a0f464d5a61de705c58bff73a876
-
SHA256
2e738a78203215fddff9c078efc3a33524f73892c3a36d1de45158c94b241e32
-
SHA512
b07983e41d7c4a3fb6cd619e485d6e1cd61965add1ac2bc53a1915bfda3f70f6926f2b5f324028fb91da6113ed374d1ab33ac3b67e65634b3d0827ebfb2fef78
-
SSDEEP
768:OAUqYpNSIoKpDd1KM02kQhx4hOtFceWzYqvz0bOS:HLo8LKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.74fd91641ba14e4c20a9bc8702ba9390.exe
Files
-
NEAS.74fd91641ba14e4c20a9bc8702ba9390.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE