Behavioral task
behavioral1
Sample
0x0007000000022e38-52.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0x0007000000022e38-52.exe
Resource
win10v2004-20231023-en
General
-
Target
0x0007000000022e38-52.dat
-
Size
30KB
-
MD5
43afb655d1d3293da6b8cc77a75da887
-
SHA1
87c0bffd01806b7ebbe993e0845b675bdd5c24c1
-
SHA256
e6028f3c79a75d274f4c541dae8a9de96002b2f5360405189cc53e560f91601c
-
SHA512
45e454c7d55f2416a48b74626778dd033a5cd894523bae4ad1d90f8a4136787e9fb257c87dd331d3733e5e0f6e6eb473221159062200a0d07ba71971683719c3
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0007000000022e38-52.dat
Files
-
0x0007000000022e38-52.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE