Behavioral task
behavioral1
Sample
0x0006000000016ce7-69.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0x0006000000016ce7-69.exe
Resource
win10v2004-20231020-en
General
-
Target
0x0006000000016ce7-69.dat
-
Size
30KB
-
MD5
fc7f62b7a0ae308127d95c74f2e93247
-
SHA1
36592df76c303e39a20254a502e01d360828f7b1
-
SHA256
acfb483da056133a8f0c48bb8ac1b3eea0cbd2d28255565655ce04c13fbaed32
-
SHA512
30991c3f72d88554e75ea4ff2906f7af31413a8deb31a271cc9504a2750232e2c89877518cd58ce9184e0f1282e53adcac89afd356d464532c261cb629b0bf3d
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000016ce7-69.dat
Files
-
0x0006000000016ce7-69.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE