Behavioral task
behavioral1
Sample
0x0006000000022de7-52.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0x0006000000022de7-52.exe
Resource
win10v2004-20231025-en
General
-
Target
0x0006000000022de7-52.dat
-
Size
31KB
-
MD5
0170f2ce3c661c8b110850802ac5db2c
-
SHA1
01fb2c0fbb91e1fe6faf019cc416c5b0d4ebfc9e
-
SHA256
91a4bdef857da96852ff6cf35b45a539ca1bce33f0d18eff3c25726c30498472
-
SHA512
235ea036babe33df52b5e459c957c3d381bf9dde0346976227f7e00b3f1b804e8313a7e046f95a7715dc1879c4b4f2642070c2fee77da500cde3cf60fb17d04e
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000022de7-52.dat
Files
-
0x0006000000022de7-52.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE