General
-
Target
0x00050000000193a5-73.dat
-
Size
30KB
-
MD5
a2a8503fa5b0909fc7061ab2526dcf79
-
SHA1
6de70590fbce34fcecd14fa489eebe32ddc54705
-
SHA256
c22853b040f35efa42761bbfad1455d3f552c61ceddfab30f180f2b0d50268fb
-
SHA512
b9b8db133956f578e13cb77ffd8d881a86e957048c452aaade2f501a22ba7b821323d1d62e7656d4856c8d9dff497ad9076373c29e2d3eed5545e0451750c6e7
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x00050000000193a5-73.dat
Files
-
0x00050000000193a5-73.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE