Behavioral task
behavioral1
Sample
1504-85-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
1504-85-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win10v2004-20231023-en
General
-
Target
1504-85-0x0000000000400000-0x0000000000409000-memory.dmp
-
Size
36KB
-
MD5
f25f0a76ea5db174a1cc1c962110e3a4
-
SHA1
9dd1262479466035252b30e8599b6ef8283f572c
-
SHA256
a321e6fb034bf0ce97748161c271ea9e7070c7ebb8ba4d2c23a97ccac1db1da6
-
SHA512
08967a311643ba18ac754f75502a8445b85eef4ff9eb121872f5200984012e5f7ebd37e8137aba8b3a17a1dd15af3aebcea3b1500de90831cbd5e7232db20a90
-
SSDEEP
768:k6Qe+qUvg30hscqdvOXA6XkPslJvGaVW:k6H+qUvgjrvOXf9Je4
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1504-85-0x0000000000400000-0x0000000000409000-memory.dmp
Files
-
1504-85-0x0000000000400000-0x0000000000409000-memory.dmp.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE