Behavioral task
behavioral1
Sample
0x0006000000016c34-69.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0x0006000000016c34-69.exe
Resource
win10v2004-20231023-en
General
-
Target
0x0006000000016c34-69.dat
-
Size
30KB
-
MD5
4e80e13e9b6c2ca865f41fa6af55b2d5
-
SHA1
14bb595be12ca3fa26852273c8b334ca51e66bdb
-
SHA256
890cdae2e4c8359e626e2ff4b97e82cc764c886855c028416f6f6ed40ae7196d
-
SHA512
61c6b3b483aa43954dfd3ae9d01e761d0bdd1ff30478f80fd036e6a0af236ca779c4fd849d2cb610acbd82bf9454291bcd180fea12db458d7d825709a0aafcb9
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000016c34-69.dat
Files
-
0x0006000000016c34-69.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE