General
-
Target
0x0006000000015d39-79.dat
-
Size
30KB
-
MD5
48c4883c02450f49258c850caec46f1d
-
SHA1
72af0ee3015995f6e8b00443acf22c063a157ccb
-
SHA256
475dcaf8823ab161ff409f7c1dbeb20066148034563d0eb79fd4b772ca818a1c
-
SHA512
c4a0c74acd73d4d4c6890b99ea117c659821d5805930716c28f565211317a571a65c7395fa120521a560082d0480073c41356b01cfa7d4338e62c5759a5f8d45
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000015d39-79.dat
Files
-
0x0006000000015d39-79.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE