General
-
Target
0x00050000000186b9-69.dat
-
Size
30KB
-
MD5
6c52cfe7a0adc866072491ae0bda11f5
-
SHA1
20197148ef6fdf96079c33fc43e91320ae8c3716
-
SHA256
fa2e1175a0a773e369813dc3bc55e22e60b688c3ad722ebb9553a0fc5fde0cb4
-
SHA512
84f24dd0bce57f298c5fd9de907e8fac9dedfd150964eec4bbb795585f2021865056fc2101d846d9207e11708f145bf62a1c6d186429f02d1aed461459ae191f
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x00050000000186b9-69.dat
Files
-
0x00050000000186b9-69.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE