Behavioral task
behavioral1
Sample
0x0006000000022da8-51.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0x0006000000022da8-51.exe
Resource
win10v2004-20231023-en
General
-
Target
0x0006000000022da8-51.dat
-
Size
30KB
-
MD5
d2d5c305540b19582d0fa7bce1991547
-
SHA1
537c1268393479ab57fc36d3437cf2add7f41639
-
SHA256
a085fa88baf6194f4e7e64f0cdfc28f1819157a4ab68114fe7be861811dd523f
-
SHA512
165beb24a516852b10d3bf86495ba7da847e2e0575eb56255da33a78b6f646e2c8afcfd3570c6abec8a377e137721fc1067117d2e6f89fdbc6f61e51f68dfb5c
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000022da8-51.dat
Files
-
0x0006000000022da8-51.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE