Behavioral task
behavioral1
Sample
0x0006000000015cad-69.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0x0006000000015cad-69.exe
Resource
win10v2004-20231023-en
General
-
Target
0x0006000000015cad-69.dat
-
Size
30KB
-
MD5
79f471a3bab8e847c93373e434611a29
-
SHA1
6ffaef84522f9324b5548752f58644f9463520d0
-
SHA256
70d7b7915851ecea9c65ff25efca2e87393d60d22b71e1e0d50e2b6c30caf8da
-
SHA512
ceba009c941027cfaf41dee1f1fc0a8626d8ac5cbc6ed4b882c9a927aa46d5cbc71ea82b1f2bbbb6b450b58b38a6fbd8347a19e868c6a0cd1bed22e6bce04a1a
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000015cad-69.dat
Files
-
0x0006000000015cad-69.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE