Behavioral task
behavioral1
Sample
0x0006000000016d63-69.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0x0006000000016d63-69.exe
Resource
win10v2004-20231020-en
General
-
Target
0x0006000000016d63-69.dat
-
Size
30KB
-
MD5
fe08d9c25f22ca296f30b1963de84f7a
-
SHA1
980e2b96557e11b59b760889a17f448ce4f6885a
-
SHA256
bbc921f412e3960134b13cc03dcbbba5f818e2095350b75a6f1380ea4cd5a643
-
SHA512
873663c6e324c36b12c81768c83cab81a902f3036513c822e621cac298db7d70a6d57e267ef5e231e795a6079ffd21422a23a4b27f36c721bd134fd5d7bc347d
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000016d63-69.dat
Files
-
0x0006000000016d63-69.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE