Behavioral task
behavioral1
Sample
0x0006000000022d05-52.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0x0006000000022d05-52.exe
Resource
win10v2004-20231023-en
General
-
Target
0x0006000000022d05-52.dat
-
Size
31KB
-
MD5
2b461939c4edb1c43872fd103ff2ff2b
-
SHA1
88f87c0a854194a8afde9b2c4cdd0ab24e9d6706
-
SHA256
f235cae8d5be985de76e6a71aa24c8863fe674201b6f92b74c9e639a66f17830
-
SHA512
9848ba4b3e2effe445a586e04e342c398a257148c3f3b1394efcbb5da5a08ad8de407821d534af76d765568867e2d72ce39e9201ff81b3f88a61002efd241928
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000022d05-52.dat
Files
-
0x0006000000022d05-52.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE