General
-
Target
0x00060000000165f8-82.dat
-
Size
30KB
-
MD5
3ad2f5d572409d6a37ca841e4b84a95f
-
SHA1
ff1f7ba7b47a97d92ba7754e4b13464614fb1d20
-
SHA256
cf69d58227d37c00c0db5e5ef6551261e3dd33afe2bf5a279a025dc2a808eef6
-
SHA512
bebd63dc082e0df43eb20658694f3ecb3b4fd4eafd699ae0887848cab212acc1cc911e929db61f189c8f1e7b9b3daf76b969ef56202c9499ad0e2b6a6e6d5f3b
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x00060000000165f8-82.dat
Files
-
0x00060000000165f8-82.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE