General
-
Target
0x0006000000015654-73.dat
-
Size
30KB
-
MD5
243447054d4b403d2919bd3356dd1071
-
SHA1
84e83eada22876506a7842df1841dea10cf90f39
-
SHA256
d487e731634ac2d347e7a2c8052c82cafdac22a64ab54c9fb253d4f0f1f6e313
-
SHA512
a551ba5f5bb978903f7c384ffe17d5e49f9f9bda9e67d88cfe9bee898c09f615f0e58e94af9d67e93e7809389493d12b9cb37a9347d3ead107b00e67303172c9
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000015654-73.dat
Files
-
0x0006000000015654-73.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE