General
-
Target
0x000600000001659c-69.dat
-
Size
30KB
-
MD5
37e21221b7258b633f5ab7abaa76b921
-
SHA1
2115eccfcd88298408be7791850504fdef0f6a0d
-
SHA256
5025dc87fd32cf382a7963e641b358f7248a61c1f7bbacaaa2d9843493c82f81
-
SHA512
1e41e029fdcb930bb232a8d6a92a072b95194ddb8f86ca8b8d6e51c23d9007b4f5863a8efb8c415cd009926d72065f3a4fdb10dada97bf8d5995c6e594c53786
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x000600000001659c-69.dat
Files
-
0x000600000001659c-69.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE